Correct some non-exploitable format string errors and an extraneous

format string argument.

2 files changed, 38 insertions, 0 deletions

diff --git a/ftp/curl/files/patch-lib::ftp.c b/ftp/curl/files/patch-lib::ftp.c
new file mode 100644
index 0000000..559b4f1
--- /dev/null
+++ b/ftp/curl/files/patch-lib::ftp.c
@@ -0,0 +1,27 @@
+--- lib/ftp.c.orig	Thu Jun  6 17:12:12 2002
++++ lib/ftp.c	Thu Jun  6 17:13:28 2002
+@@ -1067,13 +1067,13 @@
+   }
+   freeaddrinfo(res);
+   if (portsock < 0) {
+-    failf(data, strerror(errno));
++    failf(data, "%s", strerror(errno));
+     return CURLE_FTP_PORT_FAILED;
+   }
+ 
+   sslen = sizeof(ss);
+   if (getsockname(portsock, sa, &sslen) < 0) {
+-    failf(data, strerror(errno));
++    failf(data, "%s", strerror(errno));
+     return CURLE_FTP_PORT_FAILED;
+   }
+ 
+@@ -1370,7 +1370,7 @@
+   
+   for (modeoff = (data->set.ftp_use_epsv?0:1);
+        mode[modeoff]; modeoff++) {
+-    result = Curl_ftpsendf(conn, mode[modeoff]);
++    result = Curl_ftpsendf(conn, "%s", mode[modeoff]);
+     if(result)
+       return result;
+     nread = Curl_GetFTPResponse(buf, conn, &ftpcode);
diff --git a/ftp/curl/files/patch-lib::ldap.c b/ftp/curl/files/patch-lib::ldap.c
new file mode 100644
index 0000000..567a0ac
--- /dev/null
+++ b/ftp/curl/files/patch-lib::ldap.c
@@ -0,0 +1,11 @@
+--- lib/ldap.c.orig	Thu Jun  6 17:14:16 2002
++++ lib/ldap.c	Thu Jun  6 17:14:24 2002
+@@ -147,7 +147,7 @@
+   int ldaptext;
+   struct SessionHandle *data=conn->data;
+   
+-  infof(data, "LDAP: %s %s\n", data->change.url);
++  infof(data, "LDAP: %s\n", data->change.url);
+ 
+   DynaOpen();
+   if (libldap == NULL) {