Blame SOURCES/festival-1.96-format-security.patch

23ca74
diff -Naur festival.orig/speech_tools/siod/siodeditline.c festival/speech_tools/siod/siodeditline.c
23ca74
--- festival.orig/speech_tools/siod/siodeditline.c	2004-04-30 18:56:51.000000000 +0200
23ca74
+++ festival/speech_tools/siod/siodeditline.c	2014-05-12 19:00:37.491000000 +0200
23ca74
@@ -151,7 +151,7 @@
23ca74
     symbol = el_current_sym();
23ca74
     infostring = siod_manual_sym(symbol);
23ca74
     putc('\n',stderr);
23ca74
-    fprintf(stderr,infostring);
23ca74
+    fprintf(stderr,"%s",infostring);
23ca74
     fflush(stderr);
23ca74
     putc('\n',stderr);
23ca74
     fflush(stderr);
23ca74
diff -Naur festival.orig/speech_tools/utils/cmd_line.cc festival/speech_tools/utils/cmd_line.cc
23ca74
--- festival.orig/speech_tools/utils/cmd_line.cc	2004-09-30 14:53:37.000000000 +0200
23ca74
+++ festival/speech_tools/utils/cmd_line.cc	2014-05-12 19:08:57.577000000 +0200
23ca74
@@ -460,7 +460,7 @@
23ca74
     fprintf(stdout,"<cmdsynopsis><command>%s</command>", 
23ca74
 	    (const char *)full.filename());
23ca74
 
23ca74
-    fprintf(stdout, (const char *)ts.get_upto_eoln().string());
23ca74
+    fprintf(stdout, "%s", (const char *)ts.get_upto_eoln().string());
23ca74
 
23ca74
     while (!ts.eof())
23ca74
     {