forked from Lainports/freebsd-ports
3f08af39e0
which officially fixes the setuid security exploit by the vendors.
Additionally, from the PR:
* adds in distribution patches to allow it to interoperate
with libtiff-3.5.5 (the current version in the ports tree),
and replace an original FreeBSD patch.
* includes security patches (replacements of 'strcpy' and
'sprintf', primarily), mostly based on patches originally
submitted by Alex Langer [1] for 4.0pl2 and not yet commited,
although some new work was done too.
[1] I don't think, that these were my patches but those submitted by
John Holland <john@zoner.org> in PR 19180.
* Fixes some issues with the configure/setup scripts introduced
since the previous version.
* Additionally, original FreeBSD patches from 4.0pl2 were
merged in where they were not addressed by anything else.
(except the I18N patch, sorry).
I removed the FORBIDDEN line since there are at least no obvious security
concerns left.
PR: 19237
Submitted by: Andy Sparrow <andy@geek4food.org>
12 lines
570 B
Text
12 lines
570 B
Text
diff -ruN sgi2fax/imgtofax.c.orig sgi2fax/imgtofax.c
|
|
--- sgi2fax/imgtofax.c.orig Mon Oct 12 13:47:50 1998
|
|
+++ sgi2fax/imgtofax.c Mon Jun 12 21:52:42 2000
|
|
@@ -214,7 +214,7 @@
|
|
TIFFSetField(tif, TIFFTAG_PAGENUMBER, pn, npages);
|
|
TIFFSetField(tif, TIFFTAG_CLEANFAXDATA, CLEANFAXDATA_CLEAN);
|
|
{ char buf[1024];
|
|
- sprintf(buf, "Ditherered B&W version of %s", input);
|
|
+ snprintf(buf, sizeof(buf), "Ditherered B&W version of %s", input);
|
|
TIFFSetField(tif, TIFFTAG_IMAGEDESCRIPTION, buf);
|
|
}
|
|
TIFFSetField(tif, TIFFTAG_SOFTWARE, "sgi2fax");
|