File 07_fix-formatstring.patch of Package scrot

Author: George Danchev <danchev@spnet.net>
Description: Prevent arbitrary long file names
--- a/src/options.c
+++ b/src/options.c
@@ -124,6 +124,12 @@
          if (!opt.output_file)
          {
             opt.output_file = argv[optind++];
+
+            if ( strlen(opt.output_file) > 256 ) {
+               printf("output filename too long.\n");
+               exit(EXIT_FAILURE);
+            }
+
             if (opt.thumb)
                opt.thumb_file = name_thumbnail(opt.output_file);
          }
openSUSE Build Service is sponsored by