From 26a7936d86b996aa7ddc0a3ff4a3bdc2d366d962 Mon Sep 17 00:00:00 2001 From: Michael Biebl Date: Sat, 24 Mar 2012 13:21:06 +0100 Subject: debian/patches/10-format-security.patch: Fix format string vulnerability by using g_set_error_literal(). --- debian/patches/10-format-security.patch | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 debian/patches/10-format-security.patch (limited to 'debian/patches/10-format-security.patch') diff --git a/debian/patches/10-format-security.patch b/debian/patches/10-format-security.patch new file mode 100644 index 00000000..84e50288 --- /dev/null +++ b/debian/patches/10-format-security.patch @@ -0,0 +1,21 @@ +Description: Fix a format string vulnerability +Author: Michael Biebl +diff --git a/libnm-util/nm-setting-bond.c b/libnm-util/nm-setting-bond.c +index 9f9f438..fe874ab 100644 +--- a/libnm-util/nm-setting-bond.c ++++ b/libnm-util/nm-setting-bond.c +@@ -402,10 +402,10 @@ verify (NMSetting *setting, GSList *all_settings, GError **error) + || !value[0] + || (strlen (value) > 200) + || strchr (value, ' ')) { +- g_set_error (error, +- NM_SETTING_BOND_ERROR, +- NM_SETTING_BOND_ERROR_INVALID_OPTION, +- key); ++ g_set_error_literal (error, ++ NM_SETTING_BOND_ERROR, ++ NM_SETTING_BOND_ERROR_INVALID_OPTION, ++ key); + return FALSE; + } + } -- cgit 1.3.0-6-gf8a5