iptraf-ng-format-security.patch

   1 --- iptraf-ng-1.1.3.1/src/ipfilter.c.formatsec  2013-02-05 13:57:52.461008094 +0100
   2 +++ iptraf-ng-1.1.3.1/src/ipfilter.c    2013-02-05 13:58:17.100874609 +0100
   3 @@ -136,7 +136,7 @@ void gethostparams(struct hostparams *da
   4                                 snprintf(msgstr, 60,
   5                                          "Invalid protocol input at or near token \"%s\"",
   6                                          bptr);
   7 -                               tui_error(ANYKEY_MSG, msgstr);
   8 +                               tui_error(ANYKEY_MSG, "%s", msgstr);
   9                                 doagain = 1;
  10                         } else
  11                                 doagain = 0;
  12 --- iptraf-ng-1.1.3.1/src/othptab.c.formatsec   2013-02-05 14:02:18.220828537 +0100
  13 +++ iptraf-ng-1.1.3.1/src/othptab.c     2013-02-05 14:09:36.732870661 +0100
  14 @@ -430,7 +430,7 @@ void printothpentry(struct othptable *ta
  15                                 break;
  16                         }
  17
  18 -                       sprintf(scratchpad, rarp_mac_addr);
  19 +                       sprintf(scratchpad, "%s", rarp_mac_addr);
  20                         strcat(msgstring, scratchpad);
  21                         wattrset(table->othpwin, ARPATTR);
  22                         break;
  23 @@ -505,7 +505,7 @@ void printothpentry(struct othptable *ta
  24                 wattrset(table->othpwin, UNKNIPATTR);
  25                 protptr = getprotobynumber(entry->protocol);
  26                 if (protptr != NULL) {
  27 -                       sprintf(protname, protptr->p_aliases[0]);
  28 +                       sprintf(protname, "%s", protptr->p_aliases[0]);
  29                 } else {
  30                         sprintf(protname, "IP protocol");
  31                         unknown = 1;