File dt-wformat-security.patch of Package dt
Index: dt.c
===================================================================
--- dt.c.orig
+++ dt.c
@@ -4378,7 +4378,7 @@ report_error(
(void)sprintf(dip->di_msg_buffer, "(%d): '%s', errno = %d - %s\n",
dip->di_process_id, error_info, errno, emsg);
}
- syslog(LOG_ERR, dip->di_msg_buffer);
+ syslog(LOG_ERR, "%s", dip->di_msg_buffer);
}
#endif /* defined(SYSLOG) */
Index: dtutil.c
===================================================================
--- dtutil.c.orig
+++ dtutil.c
@@ -5180,7 +5180,7 @@ ReportDeviceInfo (
bp += Sprintf(bp,
"(%d) Device name: %s\n",
dip->di_process_id, dip->di_dname);
- syslog(LOG_ERR, dip->di_msg_buffer);
+ syslog(LOG_ERR, "%s", dip->di_msg_buffer);
bp = dip->di_msg_buffer;
# if defined(SCSI)
if (dip->di_serial_number) {
@@ -5193,7 +5193,7 @@ ReportDeviceInfo (
dip->di_process_id, dip->di_device_id);
}
# endif /* defined(SCSI) */
- syslog(LOG_ERR, dip->di_msg_buffer);
+ syslog(LOG_ERR, "%s", dip->di_msg_buffer);
bp = dip->di_msg_buffer;
bp += Sprintf(bp,
"(%d) Relative block number where the error occurred is " LUF ","
@@ -5203,7 +5203,7 @@ ReportDeviceInfo (
} else {
bp += Sprintf(bp, "\n");
}
- syslog(LOG_ERR, dip->di_msg_buffer);
+ syslog(LOG_ERR, "%s", dip->di_msg_buffer);
}
#endif /* defined(SYSLOG) */