diff options
| author | drochner <drochner@pkgsrc.org> | 2008-03-05 19:08:05 +0000 |
|---|---|---|
| committer | drochner <drochner@pkgsrc.org> | 2008-03-05 19:08:05 +0000 |
| commit | f45ff136c46882593507ecc7e298de5acb982641 (patch) | |
| tree | c3963b7277c1004327492a5697b5f331610a1c6a /mail/evolution/patches | |
| parent | 93a40a7c45671e7ee865ac35370835c737362988 (diff) | |
| download | pkgsrc-f45ff136c46882593507ecc7e298de5acb982641.tar.gz | |
fix some format string problems, should fix CVE-2008-0072
(There is no exact information available, so I've patched all uses
of non-constant strings as format specifiers.)
bump PKGREVISION
Diffstat (limited to 'mail/evolution/patches')
| -rw-r--r-- | mail/evolution/patches/patch-ac | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/mail/evolution/patches/patch-ac b/mail/evolution/patches/patch-ac new file mode 100644 index 00000000000..48cb3e73940 --- /dev/null +++ b/mail/evolution/patches/patch-ac @@ -0,0 +1,40 @@ +$NetBSD: patch-ac,v 1.15 2008/03/05 19:08:05 drochner Exp $ + +--- mail/em-format.c.orig 2007-10-12 08:56:01.000000000 +0200 ++++ mail/em-format.c +@@ -1350,7 +1350,7 @@ emf_multipart_encrypted(EMFormat *emf, C + if (valid == NULL) { + em_format_format_error(emf, stream, ex->desc?_("Could not parse PGP/MIME message"):_("Could not parse PGP/MIME message: Unknown error")); + if (ex->desc) +- em_format_format_error(emf, stream, ex->desc); ++ em_format_format_error(emf, stream, "%s", ex->desc); + em_format_part_as(emf, stream, part, "multipart/mixed"); + } else { + if (emfc == NULL) +@@ -1515,7 +1515,7 @@ emf_multipart_signed(EMFormat *emf, Came + if (valid == NULL) { + em_format_format_error(emf, stream, ex->desc?_("Error verifying signature"):_("Unknown error verifying signature")); + if (ex->desc) +- em_format_format_error(emf, stream, ex->desc); ++ em_format_format_error(emf, stream, "%s", ex->desc); + em_format_part_as(emf, stream, part, "multipart/mixed"); + } else { + if (emfc == NULL) +@@ -1586,7 +1586,7 @@ emf_inlinepgp_signed(EMFormat *emf, Came + if (!valid) { + em_format_format_error(emf, stream, ex->desc?_("Error verifying signature"):_("Unknown error verifying signature")); + if (ex->desc) +- em_format_format_error(emf, stream, ex->desc); ++ em_format_format_error(emf, stream, "%s", ex->desc); + em_format_format_source(emf, stream, ipart); + /* I think this will loop: em_format_part_as(emf, stream, part, "text/plain"); */ + camel_exception_free(ex); +@@ -1657,7 +1657,7 @@ emf_inlinepgp_encrypted(EMFormat *emf, C + if (!valid) { + em_format_format_error(emf, stream, ex->desc?_("Could not parse PGP message"):_("Could not parse PGP message: Unknown error")); + if (ex->desc) +- em_format_format_error(emf, stream, ex->desc); ++ em_format_format_error(emf, stream, "%s", ex->desc); + em_format_format_source(emf, stream, ipart); + /* I think this will loop: em_format_part_as(emf, stream, part, "text/plain"); */ + camel_exception_free(ex); |