r43946 - in /packages/geomview/trunk/debian: changelog patches/04_sprintf-string-literal.patch

[smr at users.alioth.debian.org]

Author: smr
Date: Mon Oct 10 22:22:42 2011
New Revision: 43946

URL: http://svn.debian.org/wsvn/debian-science/?sc=1&rev=43946
Log:
Ensure format strings are literals.

Added:
    packages/geomview/trunk/debian/patches/04_sprintf-string-literal.patch
Modified:
    packages/geomview/trunk/debian/changelog

Modified: packages/geomview/trunk/debian/changelog
URL: http://svn.debian.org/wsvn/debian-science/packages/geomview/trunk/debian/changelog?rev=43946&op=diff
==============================================================================
--- packages/geomview/trunk/debian/changelog (original)
+++ packages/geomview/trunk/debian/changelog Mon Oct 10 22:22:42 2011
@@ -2,9 +2,12 @@
 
   * rules: Disable strict-aliasing.
   
+  * patches/04_sprintf-string-literal.patch: New.  Ensure format strings
+    are literals.  Closes: #643382.
+  
   * geomview.desktop: Fix categories, remove encoding.
 
- -- Steve M. Robbins <smr at debian.org>  Mon, 10 Oct 2011 17:03:57 -0500
+ -- Steve M. Robbins <smr at debian.org>  Mon, 10 Oct 2011 17:22:25 -0500
 
 geomview (1.9.4-2) unstable; urgency=low
 

Added: packages/geomview/trunk/debian/patches/04_sprintf-string-literal.patch
URL: http://svn.debian.org/wsvn/debian-science/packages/geomview/trunk/debian/patches/04_sprintf-string-literal.patch?rev=43946&op=file
==============================================================================
--- packages/geomview/trunk/debian/patches/04_sprintf-string-literal.patch (added)
+++ packages/geomview/trunk/debian/patches/04_sprintf-string-literal.patch Mon Oct 10 22:22:42 2011
@@ -1,0 +1,13 @@
+--- src/lib/mg/rib/mgrib.c	2007-05-16 19:12:30.000000000 -0500
++++ src/lib/mg/rib/mgrib.c	2011-10-10 17:10:51.667191408 -0500
+@@ -160,8 +160,8 @@
+   /* Default RIB1.0 structure info */
+   sprintf(_mgribc->ribscene, "Generic RIB file");
+   sprintf(_mgribc->ribcreator, "mgrib driver");
+-  sprintf(_mgribc->ribfor, getenv("USER"));
+-  sprintf(_mgribc->ribdate, ctime(&timedate));
++  sprintf(_mgribc->ribfor, "%s", getenv("USER"));
++  sprintf(_mgribc->ribdate, "%s", ctime(&timedate));
+   _mgribc->ribdate[24] = '\0'; /* remove the line feed */
+   _mgribc->world = 0;
+