summaryrefslogtreecommitdiff
path: root/devel/libgtop/patches/patch-af
diff options
context:
space:
mode:
authortron <tron>2001-11-27 21:03:07 +0000
committertron <tron>2001-11-27 21:03:07 +0000
commit6cb96ae97179ddc73861b272bb81377906528b79 (patch)
treede32044d3e103308744538f654becbb575a57a60 /devel/libgtop/patches/patch-af
parent3dcdc91c8eb1b14a6cde301ea5da92cf19e3a2d8 (diff)
downloadpkgsrc-6cb96ae97179ddc73861b272bb81377906528b79.tar.gz
Fix remote format string vulnerability in "libgtop_daemon". Bump version
number to 1.0.12nb1.
Diffstat (limited to 'devel/libgtop/patches/patch-af')
-rw-r--r--devel/libgtop/patches/patch-af22
1 files changed, 22 insertions, 0 deletions
diff --git a/devel/libgtop/patches/patch-af b/devel/libgtop/patches/patch-af
new file mode 100644
index 00000000000..8b9a11ea112
--- /dev/null
+++ b/devel/libgtop/patches/patch-af
@@ -0,0 +1,22 @@
+$NetBSD: patch-af,v 1.6 2001/11/27 21:03:08 tron Exp $
+
+--- src/daemon/gnuserv.c.orig Sun Nov 28 17:43:00 1999
++++ src/daemon/gnuserv.c Tue Nov 27 21:58:17 2001
+@@ -93,7 +93,7 @@
+ vsnprintf (buffer, BUFSIZ-1, format, ap);
+ va_end (ap);
+
+- syslog (priority, buffer);
++ syslog (priority, "%s", buffer);
+ }
+
+ void
+@@ -108,7 +108,7 @@
+ va_end (ap);
+
+ snprintf (buffer2, BUFSIZ-1, "%s: %s", buffer, strerror (errno));
+- syslog (priority, buffer2);
++ syslog (priority, "%s", buffer2);
+ }
+
+ /*