graphviz/graphviz-2.38.0-format-string.patch
Jaroslav Škarvada 1fe8c83158 Fixed format string vulnerability
Resolves: rhbz#1167868
2014-11-25 17:49:39 +01:00

14 lines
374 B
Diff

diff --git a/lib/cgraph/scan.l b/lib/cgraph/scan.l
index 87db5d4..4edda50 100644
--- a/lib/cgraph/scan.l
+++ b/lib/cgraph/scan.l
@@ -225,7 +225,7 @@ void yyerror(char *str)
agxbput (&xb, buf);
agxbput (&xb, yytext);
agxbput (&xb,"'\n");
- agerr(AGERR,agxbuse(&xb));
+ agerr(AGERR, "%s", agxbuse(&xb));
agxbfree(&xb);
}
/* must be here to see flex's macro defns */