abrt-2.0.6-format-security.patch 911 B

12345678910111213141516171819202122232425262728
  1. From d0d7954713541df4612ab5b54b2808aae9a3d6f0 Mon Sep 17 00:00:00 2001
  2. From: Alexandre Rostovtsev <tetromino@gentoo.org>
  3. Date: Wed, 16 Nov 2011 00:41:10 -0500
  4. Subject: [PATCH] Don't use server response as a format string
  5. It's bad practice even for trusted servers, and makes gcc complain about
  6. format-security.
  7. ---
  8. src/plugins/abrt-retrace-client.c | 2 +-
  9. 1 files changed, 1 insertions(+), 1 deletions(-)
  10. diff --git a/src/plugins/abrt-retrace-client.c b/src/plugins/abrt-retrace-client.c
  11. index 0fb17a3..4c30334 100644
  12. --- a/src/plugins/abrt-retrace-client.c
  13. +++ b/src/plugins/abrt-retrace-client.c
  14. @@ -958,7 +958,7 @@ static int create(bool delete_temp_archive,
  15. if (response_code == 500 || response_code == 507)
  16. {
  17. alert_server_error();
  18. - error_msg_and_die(http_body);
  19. + error_msg_and_die("%s", http_body);
  20. }
  21. else if (response_code == 403)
  22. {
  23. --
  24. 1.7.8.rc1