diff options
| author | Kris Kennaway <kris@FreeBSD.org> | 2002-06-07 01:16:21 +0000 |
|---|---|---|
| committer | Kris Kennaway <kris@FreeBSD.org> | 2002-06-07 01:16:21 +0000 |
| commit | 05e004245a9bbded548f47d25f81fcbb020c3aaa (patch) | |
| tree | bff0467e84a5c60fde5df196cd0bcfc41bdcb5c0 /security/fakebo | |
| parent | Update to the 2002.06.05 version of Wine. Once again, lots of files have (diff) | |
Fix a format string vulnerability which appears to be exploitable, and
bump PORTREVISION.
Notes
Notes:
svn path=/head/; revision=60743
Diffstat (limited to 'security/fakebo')
| -rw-r--r-- | security/fakebo/Makefile | 1 | ||||
| -rw-r--r-- | security/fakebo/files/patch-aa | 11 | ||||
| -rw-r--r-- | security/fakebo/files/patch-ab | 13 |
3 files changed, 25 insertions, 0 deletions
diff --git a/security/fakebo/Makefile b/security/fakebo/Makefile index aeb0b7ea6ba6..184054d07b86 100644 --- a/security/fakebo/Makefile +++ b/security/fakebo/Makefile @@ -7,6 +7,7 @@ PORTNAME= fakebo PORTVERSION= 0.4.1 +PORTREVISION= 1 CATEGORIES= security MASTER_SITES= ftp://the.ausmac.net/wd2a/security/port-loggers/ \ ftp://ftp.mayn.de/pub/unix/security/network/ \ diff --git a/security/fakebo/files/patch-aa b/security/fakebo/files/patch-aa new file mode 100644 index 000000000000..9c47d7e9e0ed --- /dev/null +++ b/security/fakebo/files/patch-aa @@ -0,0 +1,11 @@ +--- misc.c.orig Thu Jun 6 18:11:32 2002 ++++ misc.c Thu Jun 6 18:11:41 2002 +@@ -107,7 +107,7 @@ + + #ifdef HAVE_OPENLOG + openlog("FakeBO", LOG_CONS, LOG_USER); +- syslog(LOG_WARNING, buf); ++ syslog(LOG_WARNING, "%s", buf); + closelog(); + #else + #warning "Can't find usable syslog, disabled!" diff --git a/security/fakebo/files/patch-ab b/security/fakebo/files/patch-ab new file mode 100644 index 000000000000..12c64f4fe089 --- /dev/null +++ b/security/fakebo/files/patch-ab @@ -0,0 +1,13 @@ +--- fakebo.c.orig Thu Jun 6 18:13:21 2002 ++++ fakebo.c Thu Jun 6 18:13:31 2002 +@@ -457,8 +457,8 @@ + { + static char msg[] = "Warning: SIGHUP received, but config re-read not yet implemented!\n"; + +- logprintf(TRUE, msg); +- syslogprintf(msg); ++ logprintf(TRUE, "%s", msg); ++ syslogprintf("%s", msg); + } + + #endif |