- up to 0.5.3

- fixed format string errors

diff --git a/Xarchiver.spec b/Xarchiver.spec
index 808b449f520972cee03796313f7be8204d10fc32..fd6a2132081bd12675991fee320ec92e5d7ce163 100644 (file)
--- a/Xarchiver.spec
+++ b/Xarchiver.spec
@@ -3,13 +3,14 @@
 Summary:       Xarchiver - a GTK+2 frontend to popular compression formats
 Summary(pl.UTF-8):     Xarchiver - nakładka GTK+2 na popularne formaty kompresji
 Name:          Xarchiver
-Version:       0.5.2
-Release:       6
+Version:       0.5.3
+Release:       1
 License:       GPL
 Group:         X11/Applications
 Source0:       http://downloads.sourceforge.net/xarchiver/xarchiver-%{version}.tar.bz2
-# Source0-md5: 2bc7f06403cc6582dd4a8029ec9d038d
+# Source0-md5: fd390bbd2df76a5f8a007bdeae82d4aa
 Patch0:                %{name}-desktop.patch
+Patch1:                format-security.patch
 URL:           https://github.com/ib/xarchiver/wiki
 BuildRequires: autoconf >= 2.50
 BuildRequires: automake
@@ -41,6 +42,7 @@ hasłem.
 %prep
 %setup -q -n xarchiver-%{version}
 %patch0 -p1
+%patch1 -p1
 mv -f po/nb{_NO,}.po
 mv -f po/pt{_PT,}.po
 sed -e 's/nb_NO/nb/;s/pt_PT/pt/' -i po/LINGUAS

diff --git a/format-security.patch b/format-security.patch
new file mode 100644 (file)
index 0000000..cdaa4f4
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,24 @@
+diff -ur xarchiver-0.5.3.orig/src/window.c xarchiver-0.5.3/src/window.c
+--- xarchiver-0.5.3.orig/src/window.c  2014-02-09 16:49:07.000000000 +0100
++++ xarchiver-0.5.3/src/window.c       2014-08-15 22:29:24.498161762 +0200
+@@ -233,9 +233,9 @@
+ {
+       int response;
+ 
+-      dialog = gtk_message_dialog_new (window,mode,type,button,message1);
++      dialog = gtk_message_dialog_new (window,mode,type,button,"%s",message1);
+       gtk_dialog_set_default_response (GTK_DIALOG (dialog),GTK_RESPONSE_NO);
+-      gtk_message_dialog_format_secondary_text (GTK_MESSAGE_DIALOG (dialog),message2);
++      gtk_message_dialog_format_secondary_text (GTK_MESSAGE_DIALOG (dialog),"%s",message2);
+       response = gtk_dialog_run (GTK_DIALOG (dialog));
+       gtk_widget_destroy (GTK_WIDGET (dialog));
+       return response;
+@@ -513,7 +513,7 @@
+                       g_fprintf (stream,_("Comment:\n"));
+                       if (bp)
+                               g_fprintf(stream,"</b><pre>");
+-                      g_fprintf (stream,archive[idx]->comment->str);
++                      g_fprintf (stream,"%s",archive[idx]->comment->str);
+                       if (bp)
+                               g_fprintf(stream,"</pre>");
+                       g_fprintf (stream,"\n");