fix format security errors

diff --git a/format-security.patch b/format-security.patch
new file mode 100644 (file)
index 0000000..238db2f
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,11 @@
+--- ncurses-ruby-1.3.1/form_wrap.c~    2011-05-31 02:41:46.000000000 +0300
++++ ncurses-ruby-1.3.1/form_wrap.c     2013-09-14 16:29:00.504646018 +0300
+@@ -1131,7 +1131,7 @@
+                 char msg[500];
+                 snprintf(msg, 500, "The validation functions for this field type need %d additional arguments.",(int)(NUM2INT(argc)-1));
+                 msg[499]=0;
+-                rb_raise(rb_eArgError, msg);  
++                rb_raise(rb_eArgError, "%s", msg);    
+               }
+        } 
+   }

diff --git a/ruby-ncurses.spec b/ruby-ncurses.spec
index 475453101a17eb1b6f72c8ba727226053386c8ba..e609ae5cae06768855cd35a57ffd05bb934487a8 100644 (file)
--- a/ruby-ncurses.spec
+++ b/ruby-ncurses.spec
@@ -9,11 +9,11 @@ Group:                Development/Languages
 Source0:       http://download.berlios.de/ncurses-ruby/%{pkgname}-ruby-%{version}.tar.bz2
 # Source0-md5: 63fd3d09a51cdd745e1ed37f85621ea2
 Patch0:                %{name}-utf8.patch
+Patch1:                format-security.patch
 URL:           http://ncurses-ruby.berlios.de/
 BuildRequires: ncurses-devel
-BuildRequires: rpmbuild(macros) >= 1.277
-BuildRequires: ruby-devel >= 1:1.8.4-5
-%{?ruby_mod_ver_requires_eq}
+BuildRequires: rpm-rubyprov
+BuildRequires: rpmbuild(macros) >= 1.665
 Provides:      ruby-Ncurses
 Obsoletes:     ruby-Ncurses
 BuildRoot:     %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
@@ -65,6 +65,7 @@ Dokumentacji w formacie ri dla %{pkgname}.
 %prep
 %setup -q -n %{pkgname}-ruby-%{version}
 %patch0 -p1
+%patch1 -p1
 
 %build
 ruby extconf.rb \