media-sound/vorbis-tools/files/vorbis-tools-1.4.0-format-security.patch


1
2
3
4
5
6
7
8
9
10
11

--- vorbis-tools-1.4.0.orig/ogg123/status.c
+++ vorbis-tools-1.4.0/ogg123/status.c
@@ -148,7 +148,7 @@
 
     switch (stats->type) {
     case stat_noarg:
-      len += sprintf(str+len, stats->formatstr);
+      len += sprintf(str+len, "%s", stats->formatstr);
       break;
     case stat_intarg:
       len += sprintf(str+len, stats->formatstr, stats->arg.intarg);