[Debian-islamic-commits] [itools] 07/08: Added str_format_security.diff patch to add format argument for an sprintf call that prints a variable string

[أحمد المحمودي (Ahmed El-Mahmoudy)]

This is an automated email from the git hooks/post-receive script.

aelmahmoudy-guest pushed a commit to branch master
in repository itools.

commit 4191fe1d0b59b998240c9795262fe5070185ccf4
Author: أحمد المحمودي (Ahmed El-Mahmoudy) <aelmahmoudy at users.sourceforge.net>
Date:   Thu Oct 30 09:43:38 2014 +0200

    Added str_format_security.diff patch to add format argument for an sprintf call that prints a variable string
---
 debian/patches/series                   |  1 +
 debian/patches/str_format_security.diff | 13 +++++++++++++
 2 files changed, 14 insertions(+)

diff --git a/debian/patches/series b/debian/patches/series
index 29c9c9f..d707d14 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,2 +1,3 @@
 01_manpages.diff
 fix_link_libs_placement.diff
+str_format_security.diff
diff --git a/debian/patches/str_format_security.diff b/debian/patches/str_format_security.diff
new file mode 100644
index 0000000..9197373
--- /dev/null
+++ b/debian/patches/str_format_security.diff
@@ -0,0 +1,13 @@
+Description: Added format argument for an sprintf call that prints a variable string
+Author: أحمد المحمودي (Ahmed El-Mahmoudy) <aelmahmoudy at users.sourceforge.net>
+--- a/ipraytime.c
++++ b/ipraytime.c
+@@ -908,7 +908,7 @@
+    /* Fill the city name */
+    if (user_input.city && !user_cmdline)
+    {
+-      sprintf(city_name, user_input.city);
++      sprintf(city_name, "%s", user_input.city);
+       free(user_input.city);
+    }
+    else

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-islamic/packages/itools.git