[SCM] vdr-plugin-xine packaging repository branch, master, updated. debian/0.9.4-7-4-g431c40a

[etobi]

The following commit has been merged in the master branch:
commit 431c40aac02e022a80d9be84a56e9850f57f8d4e
Author: etobi <git at e-tobi.net>
Date:   Sat Mar 16 09:29:30 2013 +0100

    Fixed formatting strings related security issues

diff --git a/debian/changelog b/debian/changelog
index d9ea046..003ebfe 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,7 +4,8 @@ vdr-plugin-xine (0.9.4-8) unstable; urgency=low
   * Build-depend in vdr-dev (>= 1.7.40)
   * Use debhelper 9
   * Added patch to support VDR 1.7.33 and yaepg (taken from yavdr by
-    Lars Hanisch and Holger Schvestka )
+    Lars Hanisch and Holger Schvestka)
+  * Fixed formatting strings related security issues
 
  -- Tobias Grimm <etobi at debian.org>  Sat, 16 Mar 2013 08:52:31 +0100
 
diff --git a/debian/patches/format-strings.patch b/debian/patches/format-strings.patch
new file mode 100644
index 0000000..6ddd4ad
--- /dev/null
+++ b/debian/patches/format-strings.patch
@@ -0,0 +1,13 @@
+Index: vdr-plugin-xine/vdr172h264parser.c
+===================================================================
+--- vdr-plugin-xine.orig/vdr172h264parser.c	2011-10-29 16:36:24.000000000 +0200
++++ vdr-plugin-xine/vdr172h264parser.c	2013-03-16 09:28:25.000000000 +0100
+@@ -456,7 +456,7 @@
+               }
+           catch (cException *e) {
+               if (!syncing) // suppress typical error messages while syncing
+-                 esyslog(e->Message());
++                 esyslog("%s", (const char *)e->Message());
+               delete e;
+               }
+           }
diff --git a/debian/patches/series b/debian/patches/series
index cb7a05c..98e63ed 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
 enable-yaepg-support.patch
+format-strings.patch
 vdr-1.7.27.patch
 vdr-1.7.33.patch

-- 
vdr-plugin-xine packaging repository