summaryrefslogtreecommitdiff
path: root/mail
diff options
context:
space:
mode:
authorNiels Heinen <niels@FreeBSD.org>2010-05-30 18:19:42 +0000
committerNiels Heinen <niels@FreeBSD.org>2010-05-30 18:19:42 +0000
commitd3e07f03aaeba6fdf88ef6b62a00001444789818 (patch)
tree6d1bb092b31775867e33a8a8176ef08f467321c4 /mail
parentFix build error. (diff)
Added patch to fix format string vulnerability
Approved by: itetcu (mentor), maintainer (timeout) Security: http://www.vuxml.org/freebsd/3e3c860d-7dae-11d9-a9e7-0001020eed82.html
Notes
Notes: svn path=/head/; revision=255342
Diffstat (limited to 'mail')
-rw-r--r--mail/movemail/Makefile1
-rw-r--r--mail/movemail/files/patch-movemail.c53
2 files changed, 54 insertions, 0 deletions
diff --git a/mail/movemail/Makefile b/mail/movemail/Makefile
index 3a4dc7c0a2e0..76c7b5568307 100644
--- a/mail/movemail/Makefile
+++ b/mail/movemail/Makefile
@@ -7,6 +7,7 @@
PORTNAME= movemail
PORTVERSION= 1.0
+PORTREVISION= 1
CATEGORIES= mail
MASTER_SITES= http://wolfram.schneider.org/src/
diff --git a/mail/movemail/files/patch-movemail.c b/mail/movemail/files/patch-movemail.c
new file mode 100644
index 000000000000..dd8a6a942037
--- /dev/null
+++ b/mail/movemail/files/patch-movemail.c
@@ -0,0 +1,53 @@
+--- movemail.c.orig 1997-09-05 18:15:56.000000000 +0200
++++ movemail.c 2010-05-29 14:19:38.000000000 +0200
+@@ -63,6 +63,7 @@
+ #include <stdlib.h>
+ #include <errno.h>
+ #include "syswait.h"
++#include <string.h>
+ #ifdef MAIL_USE_POP
+ #include "pop.h"
+ #endif
+@@ -529,13 +530,13 @@
+ server = pop_open (0, user, password, POP_NO_GETPASS);
+ if (! server)
+ {
+- error (pop_error);
++ error ("%s",pop_error);
+ return (1);
+ }
+
+ if (pop_stat (server, &nmsgs, &nbytes))
+ {
+- error (pop_error);
++ error ("%s", pop_error);
+ return (1);
+ }
+
+@@ -568,7 +569,7 @@
+ mbx_delimit_begin (mbf);
+ if (pop_retr (server, i, mbx_write, mbf) != OK)
+ {
+- error (Errmsg);
++ error ("%s",Errmsg);
+ close (mbfi);
+ return (1);
+ }
+@@ -607,7 +608,7 @@
+ {
+ if (pop_delete (server, i))
+ {
+- error (pop_error);
++ error ("%s",pop_error);
+ pop_close (server);
+ return (1);
+ }
+@@ -615,7 +616,7 @@
+
+ if (pop_quit (server))
+ {
+- error (pop_error);
++ error ("%s",pop_error);
+ return (1);
+ }
+