diff options
| author | V3n3RiX <venerix@redcorelinux.org> | 2017-12-03 16:17:22 +0000 |
|---|---|---|
| committer | V3n3RiX <venerix@redcorelinux.org> | 2017-12-03 16:17:22 +0000 |
| commit | 4cd2370bed609c118b6edfde5d3f116e5c35b897 (patch) | |
| tree | ec58f2c41f49754e41521d5ebc9dce4597ddd0a5 /net-misc/telnet-bsd/files | |
| parent | f443475c824b4b5c086e6d040961cb35ad81bc60 (diff) | |
gentoo resync : 03.12.2017
Diffstat (limited to 'net-misc/telnet-bsd/files')
| -rw-r--r-- | net-misc/telnet-bsd/files/telnet-bsd-1.2-format-security.patch | 52 |
1 files changed, 52 insertions, 0 deletions
diff --git a/net-misc/telnet-bsd/files/telnet-bsd-1.2-format-security.patch b/net-misc/telnet-bsd/files/telnet-bsd-1.2-format-security.patch new file mode 100644 index 000000000000..b167bcec964c --- /dev/null +++ b/net-misc/telnet-bsd/files/telnet-bsd-1.2-format-security.patch @@ -0,0 +1,52 @@ +--- a/telnet/utilities.c ++++ b/telnet/utilities.c +@@ -739,22 +739,22 @@ printsub(char direction, unsigned char *pointer, int length) + case ENV_VAR: + if (pointer[1] == TELQUAL_SEND) + goto def_case; +- fprintf(NetTrace, "\" VAR " + noquote); ++ fprintf(NetTrace, "%s", "\" VAR " + noquote); + noquote = 2; + break; + + case ENV_VALUE: +- fprintf(NetTrace, "\" VALUE " + noquote); ++ fprintf(NetTrace, "%s", "\" VALUE " + noquote); + noquote = 2; + break; + + case ENV_ESC: +- fprintf(NetTrace, "\" ESC " + noquote); ++ fprintf(NetTrace, "%s", "\" ESC " + noquote); + noquote = 2; + break; + + case ENV_USERVAR: +- fprintf(NetTrace, "\" USERVAR " + noquote); ++ fprintf(NetTrace, "%s", "\" USERVAR " + noquote); + noquote = 2; + break; + +--- a/telnetd/utility.c ++++ b/telnetd/utility.c +@@ -897,17 +897,17 @@ printsub(char direction, unsigned char *pointer, int length) + case ENV_VAR: + if (pointer[1] == TELQUAL_SEND) + goto def_case; +- netoprintf("\" VAR " + noquote); ++ netoprintf("%s", "\" VAR " + noquote); + noquote = 2; + break; + + case ENV_VALUE: +- netoprintf("\" VALUE " + noquote); ++ netoprintf("%s", "\" VALUE " + noquote); + noquote = 2; + break; + + case ENV_ESC: +- netoprintf("\" ESC " + noquote); ++ netoprintf("%s", "\" ESC " + noquote); + noquote = 2; + break; + |