Fix a format string vulnerability.

Note that others might still be lurking inside the m4 code,
this is just a quick fix for the one reported on BugTraq.

(What do I think I am doing, anyway, reading BugTraq at 4:30am
 on a bleak Monday morning..)

Reported by:	<dotslash@snosoft.com> via BugTraq
This commit is contained in:
Peter Pentchev 2001-10-22 02:03:10 +00:00
parent 6a55527d71
commit 6dafd0c815
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=49050
2 changed files with 21 additions and 0 deletions

View File

@ -7,6 +7,7 @@
PORTNAME= m4
PORTVERSION= 1.4
PORTREVISION= 1
CATEGORIES= devel
MASTER_SITES= ${MASTER_SITE_GNU}
MASTER_SITE_SUBDIR= m4

20
devel/m4/files/patch-ac Normal file
View File

@ -0,0 +1,20 @@
--- src/m4.c Mon Oct 22 04:25:47 2001
+++ src/m4.c Mon Oct 22 04:26:03 2001
@@ -369,7 +369,7 @@
case 'o':
if (!debug_set_output (optarg))
- error (0, errno, optarg);
+ error (0, errno, "%s", optarg);
break;
case 's':
@@ -466,7 +466,7 @@
fp = path_search (argv[optind]);
if (fp == NULL)
{
- error (0, errno, argv[optind]);
+ error (0, errno, "%s", argv[optind]);
continue;
}
else