Fix insecure printf statement in error path, as pointed out by Toralf Förster in bug #542138.

Package-Manager: portage-2.2.17/cvs/Linux x86_64
Manifest-Sign-Key: 0xB5058F9A

4 files changed, 52 insertions, 15 deletions

diff --git a/media-libs/libbs2b/ChangeLog b/media-libs/libbs2b/ChangeLog
index 1856ae547d11..ae8c6cbe8935 100644
--- a/media-libs/libbs2b/ChangeLog
+++ b/media-libs/libbs2b/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for media-libs/libbs2b
 # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/media-libs/libbs2b/ChangeLog,v 1.24 2015/03/02 09:28:36 ago Exp $
+# $Header: /var/cvsroot/gentoo-x86/media-libs/libbs2b/ChangeLog,v 1.25 2015/03/06 13:21:39 chainsaw Exp $
+
+*libbs2b-3.1.0-r2 (06 Mar 2015)
+
+  06 Mar 2015; Tony Vroon <chainsaw@gentoo.org> +libbs2b-3.1.0-r2.ebuild,
+  +files/3.1.0-format-security.patch:
+  Fix insecure printf statement in error path, as pointed out by Toralf
+  Förster in bug #542138.
 
   02 Mar 2015; Agostino Sarubbo <ago@gentoo.org> libbs2b-3.1.0-r1.ebuild:
   Stable for ppc, wrt bug #526006
diff --git a/media-libs/libbs2b/Manifest b/media-libs/libbs2b/Manifest
index 1a5ca00624d7..dadcb98b8ba0 100644
--- a/media-libs/libbs2b/Manifest
+++ b/media-libs/libbs2b/Manifest
@@ -1,25 +1,17 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA256
 
+AUX 3.1.0-format-security.patch 370 SHA256 30966fa0d80ed6c80e75ed3c93b4f3f1500059de7ff509a9830440b74dc3d48b SHA512 43ae6b6819a89ee31603e34f955abe918422558af164d1ef3f90ed22e42bc41d5df984363ed8deeb7810a50599d90e635cb5f98878c03b53e4953137582c2e99 WHIRLPOOL 93d2aada67f2fc19c3cb8c25225e9bd1d7395909262f19bed48be420980affb39b3060e55fc63c7dac3c90c8ebc47710775c0aed5f0415e9b7d0ce477adfe158
 DIST libbs2b-3.1.0.tar.bz2 606283 SHA256 4799974becdeeedf0db00115bc63f60ea3fe4b25f1dfdb6903505839a720e46f SHA512 50cf477ff9ce6adf26fa8a696831c3a4f219c80a21ec4c93be8ec3f67f077447c17abbd9588a9de5eeb3ddacac1564a7138807468fc80e853bc78f193b4afbc4 WHIRLPOOL c8703324bf54656af8533a5ce71234ca158f819498258426c5df2da87c4c4ebb0987217e1fecf39d5f510d9a96a6b6a7da0fa0c3db9c259b573448d35ba58374
 EBUILD libbs2b-3.1.0-r1.ebuild 672 SHA256 f4a4a18307d2ac54a41c8900805a4388101a4deb4f4218429547c9fee86ff347 SHA512 39182357bfedacb477ab9a258c8b7c9dac91a8b4ba30add8eaa2786c6ed796b85f806165c567b5df922cd379a79ae530b27c307d6540ef68d588240ebeb884aa WHIRLPOOL ce445562fa9ef97595b3d627741d3556efd6397042e0688905fdf274a66434fc9068460b0a5648cf353d44412bbaafca949f7f6351b453d459a9ad670b311d35
+EBUILD libbs2b-3.1.0-r2.ebuild 759 SHA256 fd2b5656e7861d32d6caa229e8b6a744c05086c2fb4e63f97af8967db0fab77e SHA512 a081fe0854625cf87bb57333355ba0de1865d4ece95f04c6f6bbf53d57793cf1d01ebf623cce95000923183eaf544a9dc631b3572fd87ef815746a5a6dd4d3ee WHIRLPOOL 199a5d45dac04c511de174f0492904fbadb32a99030ceffc03b21d29792eebcd2846ae5bccc78860df923b327699ae70c8cee3a3c12423d9b852974725b6ca0e
 EBUILD libbs2b-3.1.0.ebuild 629 SHA256 67cbd85fd22d45d2b4175e91f6a97aa5a0d866ee6ad9833ab963f25a5024f91f SHA512 a55501c168ab5f43f4d3d4ffb3c770657bd850bb48e59914a1ad42e68c8291a88289f758ce70dcc970c60e8e33441979e55e82d1d204ad1735db4ff324b8bce6 WHIRLPOOL 60d8f21e46687ec5a26ceb5a1fabc32a33fb945a8ffe056e9c7f06efd9887602b3aedd12e3719b07aa93b49684ecbfa91f457f26c58f434ccfee9ee7e11d0236
-MISC ChangeLog 3162 SHA256 99a44aa1d077d43a73b9440973e8dfbbdee48af5b5192b710ad81de0b37ad38a SHA512 41236fe5d615508591cbfcd2d7b49fa92ec7c496716743c27383f6df3ca8b88e7859e3518415a12503e920edaf4bbeb4a68ff90990b351dfd4c2fb3501cbf968 WHIRLPOOL 18fc0d30d45c34238b28022d556f035d37a8e1ad4c6614c1a133cccb7e5bc14f4e1789e8dfe0650e959ec533772d6f4426376bd581d0aabc07dd6c8dcba1c656
+MISC ChangeLog 3412 SHA256 74b6969c120605c370740cd2e6696145e1aed853fa9c8d60784e362ad31d7df4 SHA512 96c0b48424f2f58da86b958c543adc6a243029c86c62a08889c9830f50b7a7a850bfaba2de7d11c0a50ed308702593cb6be521765f774e162a82fe5176efe8f1 WHIRLPOOL c540a797ed787d85611242594e89525aff5d0bdc713c6ededba53a4c844de921462fb755cf888518501e8ff49df9f617e7d6edbf06f0892de47008b3dc19382a
 MISC metadata.xml 258 SHA256 5fa59a9b0948090cf9ac59d499e93bf0b51c3a2f11a6cca666f2d4c03eca033d SHA512 900738229ca0bb825ee4c00f5ea0839566067012ca8818673f31dbdde3d6544a7c3356c169e38968b06dae25fbb88a28cfba105a4533c6b26d0df4de0b053200 WHIRLPOOL fbe74fb92b7652da70d244ceb77c52fc99b49971971267c6a8eb34902ca684dceda27dbb36b202d7c104d2178f8ea87d67681f1bd5df31fa080ce7b9a8ab179e
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2
 
-iQIcBAEBCAAGBQJU9C1FAAoJELp701BxlEWfJEsP/im7KCZP55hTuVDMNGJVYQcz
-JaV9u9DMo5BRy7kBypcBbRMrRAR7YRXgh/Aafv8FPlHQqp+QhCGxZUCoPeE8B/Ju
-K9+qIODusgcVqFZOKq/XyzSMzKJ1zMH4UNkD6dV27aqS7sD3Eso2I/iYdL9TdEzG
-KhFAnB8jugbDd7dQ9LAdBN5JqutZwrJ9JwTjJG3XM0He1pznHiA5/45yejVJit+O
-AWCZDpfB2E76NiCVKJQXlHoK+KqogJXbcqfeYolxYjAygC+NZZondHN0rY4gGKQe
-szhnlCxWBl1BoYMpuB9b09Lrd3R+ZEX0BED669JN7juvLUIXN3Hi+EUbGHwh0iRc
-kV8YVCuEE1hUhJGcLvbxjAIAxx5W+BKBlsS79++6QvfxhEMDRb4fkf/SisvKkjNw
-5J3XABYqfFgitk3sVgZ5tLlIM2Ox+tKE677F6qu5sxJH4hWcMZH1Gn8BiOBkOHOo
-8Hu+kDEwrJDY9e5GOqM8VPEs/2WSLdb4xbKB4kOp3R9aO/fPttNy2V52ttyGgZJp
-juBJOIq5IteoXh9KcUqyFqlyibG3xDlQ6Ir7dg95xWjAbnWJZabsv6IvIz/f1gcv
-OC5bVbfTd3d70Y4AoLpuPrzvhfD+octvNGobj+DtSvA0sDfS5m8aC7UJUJTxtKFC
-sgphBMfMqJESejtHJ1vQ
-=rLXJ
+iEYEAREIAAYFAlT5qVoACgkQp5vW4rUFj5r+bACeMFdEC7lY5KKSW3oOL2sJ82po
+0+EAnik9KiHAkX6uI2TjDLzzvyZ2uyaK
+=NDhT
 -----END PGP SIGNATURE-----
diff --git a/media-libs/libbs2b/files/3.1.0-format-security.patch b/media-libs/libbs2b/files/3.1.0-format-security.patch
new file mode 100644
index 000000000000..1b9f9f97479b
--- /dev/null
+++ b/media-libs/libbs2b/files/3.1.0-format-security.patch
@@ -0,0 +1,11 @@
+--- src/bs2bconvert.c.orig	2015-03-06 12:24:00.168451618 +0000
++++ src/bs2bconvert.c	2015-03-06 12:22:20.504446655 +0000
+@@ -153,7 +153,7 @@
+ 	if( ( infile = sf_open( infilename, SFM_READ, &sfinfo ) ) == NULL )
+ 	{
+ 		printf( "Not able to open input file %s.\n", infilename );
+-		printf( sf_strerror( NULL ) );
++		printf( "%s", sf_strerror( NULL ) );
+ 		return 1;
+ 	}
+ 
diff --git a/media-libs/libbs2b/libbs2b-3.1.0-r2.ebuild b/media-libs/libbs2b/libbs2b-3.1.0-r2.ebuild
new file mode 100644
index 000000000000..f6ece3b3bc77
--- /dev/null
+++ b/media-libs/libbs2b/libbs2b-3.1.0-r2.ebuild
@@ -0,0 +1,27 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/media-libs/libbs2b/libbs2b-3.1.0-r2.ebuild,v 1.1 2015/03/06 13:21:39 chainsaw Exp $
+
+EAPI=5
+
+inherit eutils multilib-minimal
+
+DESCRIPTION="Bauer stereophonic-to-binaural DSP library"
+HOMEPAGE="http://bs2b.sourceforge.net/"
+SRC_URI="mirror://sourceforge/bs2b/${P}.tar.bz2"
+
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~hppa ~mips ~ppc ~ppc64 ~sparc ~x86 ~amd64-fbsd ~x86-fbsd"
+IUSE=""
+
+RDEPEND=">=media-libs/libsndfile-1.0.25-r1[${MULTILIB_USEDEP}]"
+DEPEND="${RDEPEND}
+	virtual/pkgconfig"
+
+# for default_src_configure to work
+ECONF_SOURCE="${S}"
+
+src_prepare() {
+	epatch "${FILESDIR}/${PV}-format-security.patch"
+}