sync/ports
1
0
Fork 0
mirror of https://git.freebsd.org/ports.git synced 2025-07-18 17:59:20 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix the string format vulnerability desribed at

Browse source 
http://marc.theaimsgroup.com/?l=full-disclosure&m=112368237712032&w=2.

Security:	Fixes the vulnerability described at
		http://www.vuxml.org/freebsd/cveitem-2005-2549.html
Approved by:	portmgr (implicit)
Obtained from:	Evolution CVS
This commit is contained in:
Joe Marcus Clarke 2005-08-27 22:57:45 +00:00
parent b7a42fed66
commit a9f801a218
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=140994
2 changed files with 63 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
mail/evolution/Makefile
View file

@ -7,6 +7,7 @@
PORTNAME= evolution
PORTVERSION= 2.2.3
PORTREVISION= 1
CATEGORIES= mail gnome
MASTER_SITES= ${MASTER_SITE_GNOME}
MASTER_SITE_SUBDIR= sources/${PORTNAME}/2.2

62
mail/evolution/files/patch-string_vuln Normal file
View file

@ -0,0 +1,62 @@
--- calendar/gui/e-cal-component-preview.c.orig Sat Aug 27 18:48:58 2005
+++ calendar/gui/e-cal-component-preview.c Sat Aug 27 18:49:14 2005
@@ -284,7 +284,7 @@ write_html (GtkHTMLStream *stream, ECal
str = g_string_append_c (str, text.value[i]);
}
- gtk_html_stream_printf (stream, str->str);
+ gtk_html_stream_printf (stream, "%s", str->str);
g_string_free (str, TRUE);
}
--- addressbook/gui/widgets/eab-contact-display.c.orig Sat Aug 27 18:50:22 2005
+++ addressbook/gui/widgets/eab-contact-display.c Sat Aug 27 18:51:58 2005
@@ -353,7 +353,7 @@ render_contact (GtkHTMLStream *html_stre
accum_multival_attribute (accum, contact, _("Yahoo"), E_CONTACT_IM_YAHOO, YAHOO_ICON, 0);
if (accum->len > 0)
- gtk_html_stream_printf (html_stream, accum->str);
+ gtk_html_stream_printf (html_stream, "%s", accum->str);
end_block (html_stream);
@@ -368,7 +368,7 @@ render_contact (GtkHTMLStream *html_stre
if (accum->len > 0) {
start_block (html_stream, _("work"));
- gtk_html_stream_printf (html_stream, accum->str);
+ gtk_html_stream_printf (html_stream, "%s", accum->str);
end_block (html_stream);
}
@@ -383,7 +383,7 @@ render_contact (GtkHTMLStream *html_stre
if (accum->len > 0) {
start_block (html_stream, _("personal"));
- gtk_html_stream_printf (html_stream, accum->str);
+ gtk_html_stream_printf (html_stream, "%s", accum->str);
end_block (html_stream);
}
--- calendar/gui/e-calendar-view.c.orig Sat Aug 27 18:52:46 2005
+++ calendar/gui/e-calendar-view.c Sat Aug 27 18:53:10 2005
@@ -1079,7 +1079,7 @@ on_save_as (EPopup *ep, EPopupItem *pite
return;
}
- fprintf (file, ical_string);
+ fprintf (file, "%s", ical_string);
g_free (ical_string);
fclose (file);
--- calendar/gui/e-calendar-table.c.orig Sat Aug 27 18:53:42 2005
+++ calendar/gui/e-calendar-table.c Sat Aug 27 18:53:58 2005
@@ -1027,7 +1027,7 @@ e_calendar_table_on_save_as (EPopup *ep,
return;
}
- fprintf (file, ical_string);
+ fprintf (file, "%s", ical_string);
g_free (ical_string);
fclose (file);
}