format-security.patch

   1 diff -ur xarchiver-0.5.3.orig/src/window.c xarchiver-0.5.3/src/window.c
   2 --- xarchiver-0.5.3.orig/src/window.c   2014-02-09 16:49:07.000000000 +0100
   3 +++ xarchiver-0.5.3/src/window.c        2014-08-15 22:29:24.498161762 +0200
   4 @@ -233,9 +233,9 @@
   5  {
   6         int response;
   7
   8 -       dialog = gtk_message_dialog_new (window,mode,type,button,message1);
   9 +       dialog = gtk_message_dialog_new (window,mode,type,button,"%s",message1);
  10         gtk_dialog_set_default_response (GTK_DIALOG (dialog),GTK_RESPONSE_NO);
  11 -       gtk_message_dialog_format_secondary_text (GTK_MESSAGE_DIALOG (dialog),message2);
  12 +       gtk_message_dialog_format_secondary_text (GTK_MESSAGE_DIALOG (dialog),"%s",message2);
  13         response = gtk_dialog_run (GTK_DIALOG (dialog));
  14         gtk_widget_destroy (GTK_WIDGET (dialog));
  15         return response;
  16 @@ -513,7 +513,7 @@
  17                         g_fprintf (stream,_("Comment:\n"));
  18                         if (bp)
  19                                 g_fprintf(stream,"</b><pre>");
  20 -                       g_fprintf (stream,archive[idx]->comment->str);
  21 +                       g_fprintf (stream,"%s",archive[idx]->comment->str);
  22                         if (bp)
  23                                 g_fprintf(stream,"</pre>");
  24                         g_fprintf (stream,"\n");