From 90e2665fab71dcfbf5451b8d371429dd3638b5e3 Mon Sep 17 00:00:00 2001 From: CoprDistGit Date: Tue, 6 Aug 2024 04:42:21 +0000 Subject: automatic import of autogen --- autogen-sprintf-overflow.patch | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 autogen-sprintf-overflow.patch (limited to 'autogen-sprintf-overflow.patch') diff --git a/autogen-sprintf-overflow.patch b/autogen-sprintf-overflow.patch new file mode 100644 index 0000000..c336f5c --- /dev/null +++ b/autogen-sprintf-overflow.patch @@ -0,0 +1,30 @@ +Origin: https://build.opensuse.org/package/show/openSUSE:Factory/autogen +Author: Andreas Schwab +Description: Fix sprintf overflow + +Index: autogen-5.18.16/autoopts/usage.c +=================================================================== +--- autogen-5.18.16.orig/autoopts/usage.c ++++ autogen-5.18.16/autoopts/usage.c +@@ -711,7 +711,7 @@ prt_vendor_opts(tOptions * opts, char co + OPTST_NO_USAGE_MASK | OPTST_DOCUMENT; + + static char const vfmtfmt[] = "%%-%us %%s\n"; +- char vfmt[sizeof(vfmtfmt)]; ++ char vfmt[sizeof(vfmtfmt) + 9]; + + /* + * Only handle client specified options. The "vendor option" follows +Index: autogen-5.18.16/getdefs/getdefs.c +=================================================================== +--- autogen-5.18.16.orig/getdefs/getdefs.c ++++ autogen-5.18.16/getdefs/getdefs.c +@@ -374,7 +374,7 @@ buildPreamble(char ** ppzDef, char ** pp + char * pzDef = *ppzDef; + char * pzOut = *ppzOut; + +- char def_bf[ MAXNAMELEN ]; ++ char def_bf[ 2 * MAXNAMELEN + 4 ]; + char name_bf[ MAXNAMELEN ]; + char * def_str = def_bf; + char * pzIfText = NULL; -- cgit v1.2.3