rpms/libXaw
5
0
Fork 0
Code Issues Pull Requests Releases Activity

- Fixing format-security flaws (#1037174)

Browse Source
This commit is contained in:
Jaromir Capik 2014-04-16 18:12:10 +02:00
parent 65de741cbb
commit 00ac05ae68
2 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
libXaw-1.0.12-format-security.patch Normal file
View File

@ -0,0 +1,12 @@
diff -Naur libXaw-1.0.12.orig/src/DisplayList.c libXaw-1.0.12/src/DisplayList.c
--- libXaw-1.0.12.orig/src/DisplayList.c 2013-09-08 05:57:54.000000000 +0200
+++ libXaw-1.0.12/src/DisplayList.c 2014-04-16 18:08:03.440000000 +0200
@@ -287,7 +287,7 @@
}
if (fp)
{
- snprintf(cname, fp - fname + 1, fname);
+ snprintf(cname, fp - fname + 1, "%s", fname);
memmove(fname, fp + 1, strlen(fp));
lc = cname[0] ? XawGetDisplayListClass(cname) : xlibc;
if (!lc)

9
libXaw.spec
View File

@ -3,13 +3,15 @@
Summary: X Athena Widget Set Summary: X Athena Widget Set
Name: libXaw Name: libXaw
Version: 1.0.12 Version: 1.0.12
Release: 1%{?dist} Release: 2%{?dist}
License: MIT License: MIT
URL: http://www.x.org URL: http://www.x.org
Group: System Environment/Libraries Group: System Environment/Libraries
Source0: ftp://ftp.x.org/pub/individual/lib/%{name}-%{version}.tar.bz2 Source0: ftp://ftp.x.org/pub/individual/lib/%{name}-%{version}.tar.bz2
Patch0: libXaw-1.0.12-format-security.patch
BuildRequires: autoconf automake libtool BuildRequires: autoconf automake libtool
BuildRequires: pkgconfig(xproto) pkgconfig(x11) pkgconfig(xt) BuildRequires: pkgconfig(xproto) pkgconfig(x11) pkgconfig(xt)
BuildRequires: pkgconfig(xmu) pkgconfig(xpm) pkgconfig(xext) BuildRequires: pkgconfig(xmu) pkgconfig(xpm) pkgconfig(xext)
@ -31,6 +33,8 @@ X.Org X11 libXaw development package
%prep %prep
%setup -q %setup -q
%patch0 -p1
%build %build
autoreconf -v --install --force autoreconf -v --install --force
export CFLAGS="$RPM_OPT_FLAGS -Os" export CFLAGS="$RPM_OPT_FLAGS -Os"
@ -78,6 +82,9 @@ rm -rf $RPM_BUILD_ROOT
#{_pkgdocdir}/%{name}.txt #{_pkgdocdir}/%{name}.txt
%changelog %changelog
* Wed Apr 16 2014 Jaromir Capik <jcapik@redhat.com> - 1.0.12-2
- Fixing format-security flaws (#1037174)
* Wed Feb 12 2014 Adam Jackson <ajax@redhat.com> 1.0.12-1 * Wed Feb 12 2014 Adam Jackson <ajax@redhat.com> 1.0.12-1
- libXaw 1.0.12 - libXaw 1.0.12
- Drop pre-F18 changelog - Drop pre-F18 changelog