| author | Sujan Srinivasa <sujan.srinivasa@oracle.com> |
| Thu, 14 Jul 2016 23:05:42 -0700 | |
| changeset 6416 | 99d76bb5892c |
| permissions | -rw-r--r-- |
|
6416
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
1 |
This patch has been taken from community and it addresses format string vulnerability in a2ps component. |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
2 |
|
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
3 |
Patch source: |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
4 |
http://www.openwall.com/lists/oss-security/2015/11/16/4 |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
5 |
|
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
6 |
--- a2ps-4.14/lib/output.c Fri Dec 28 17:58:21 2007 |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
7 |
+++ a2ps-4.14_copy/lib/output.c Wed May 18 23:11:57 2016 |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
8 |
@@ -525,7 +525,7 @@ |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
9 |
expand_user_string (job, FIRST_FILE (job), |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
10 |
(const uchar *) "Expand: requirement", |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
11 |
(const uchar *) token)); |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
12 |
- output (dest, expansion); |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
13 |
+ output (dest, "%s", expansion); |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
14 |
continue; |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
15 |
} |
|
99d76bb5892c
22564022 problem in UTILITY/A2PS
Sujan Srinivasa <sujan.srinivasa@oracle.com>
parents:
diff
changeset
|
16 |