freebsd-ports/devel/m4/files/patch-ac
Peter Pentchev 6dafd0c815 Fix a format string vulnerability.
Note that others might still be lurking inside the m4 code,
this is just a quick fix for the one reported on BugTraq.

(What do I think I am doing, anyway, reading BugTraq at 4:30am
 on a bleak Monday morning..)

Reported by:	<dotslash@snosoft.com> via BugTraq
2001-10-22 02:03:10 +00:00

21 lines
444 B
Plaintext

--- src/m4.c Mon Oct 22 04:25:47 2001
+++ src/m4.c Mon Oct 22 04:26:03 2001
@@ -369,7 +369,7 @@
case 'o':
if (!debug_set_output (optarg))
- error (0, errno, optarg);
+ error (0, errno, "%s", optarg);
break;
case 's':
@@ -466,7 +466,7 @@
fp = path_search (argv[optind]);
if (fp == NULL)
{
- error (0, errno, argv[optind]);
+ error (0, errno, "%s", argv[optind]);
continue;
}
else