aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorniels <niels@FreeBSD.org>2010-05-31 02:19:42 +0800
committerniels <niels@FreeBSD.org>2010-05-31 02:19:42 +0800
commit132dd77c916f13d87f506de33aa705b43f6bc758 (patch)
tree57bd961df1ccf07e8550da95ed842094988abd2f
parent71d9760f4d5704888105400d4be6285f33040a31 (diff)
downloadfreebsd-ports-gnome-132dd77c916f13d87f506de33aa705b43f6bc758.tar.gz
freebsd-ports-gnome-132dd77c916f13d87f506de33aa705b43f6bc758.tar.zst
freebsd-ports-gnome-132dd77c916f13d87f506de33aa705b43f6bc758.zip
Added patch to fix format string vulnerability
Approved by: itetcu (mentor), maintainer (timeout) Security: http://www.vuxml.org/freebsd/3e3c860d-7dae-11d9-a9e7-0001020eed82.html
-rw-r--r--mail/movemail/Makefile1
-rw-r--r--mail/movemail/files/patch-movemail.c53
2 files changed, 54 insertions, 0 deletions
diff --git a/mail/movemail/Makefile b/mail/movemail/Makefile
index 3a4dc7c0a2e0..76c7b5568307 100644
--- a/mail/movemail/Makefile
+++ b/mail/movemail/Makefile
@@ -7,6 +7,7 @@
PORTNAME= movemail
PORTVERSION= 1.0
+PORTREVISION= 1
CATEGORIES= mail
MASTER_SITES= http://wolfram.schneider.org/src/
diff --git a/mail/movemail/files/patch-movemail.c b/mail/movemail/files/patch-movemail.c
new file mode 100644
index 000000000000..dd8a6a942037
--- /dev/null
+++ b/mail/movemail/files/patch-movemail.c
@@ -0,0 +1,53 @@
+--- movemail.c.orig 1997-09-05 18:15:56.000000000 +0200
++++ movemail.c 2010-05-29 14:19:38.000000000 +0200
+@@ -63,6 +63,7 @@
+ #include <stdlib.h>
+ #include <errno.h>
+ #include "syswait.h"
++#include <string.h>
+ #ifdef MAIL_USE_POP
+ #include "pop.h"
+ #endif
+@@ -529,13 +530,13 @@
+ server = pop_open (0, user, password, POP_NO_GETPASS);
+ if (! server)
+ {
+- error (pop_error);
++ error ("%s",pop_error);
+ return (1);
+ }
+
+ if (pop_stat (server, &nmsgs, &nbytes))
+ {
+- error (pop_error);
++ error ("%s", pop_error);
+ return (1);
+ }
+
+@@ -568,7 +569,7 @@
+ mbx_delimit_begin (mbf);
+ if (pop_retr (server, i, mbx_write, mbf) != OK)
+ {
+- error (Errmsg);
++ error ("%s",Errmsg);
+ close (mbfi);
+ return (1);
+ }
+@@ -607,7 +608,7 @@
+ {
+ if (pop_delete (server, i))
+ {
+- error (pop_error);
++ error ("%s",pop_error);
+ pop_close (server);
+ return (1);
+ }
+@@ -615,7 +616,7 @@
+
+ if (pop_quit (server))
+ {
+- error (pop_error);
++ error ("%s",pop_error);
+ return (1);
+ }
+