Validate query format field width specifier is sane
authorPanu Matilainen <Panu Matilainen pmatilai@redhat.com>
Wed, 17 Aug 2011 05:17:13 +0000 (08:17 +0300)
committerPanu Matilainen <Panu Matilainen pmatilai@redhat.com>
Wed, 17 Aug 2011 05:17:13 +0000 (08:17 +0300)
commitdf603a246850aa2b912547ba8f20f34ba1cc3626
tree3db0a8df335c25081241106adb1f4cd59cb1f761
parent1a02428e99f357ec2e972253b4518e47e8d071d4
Validate query format field width specifier is sane

- Only allow [[-]<number>] in the format field, users have no business
  telling which format conversion sprintf() should use for tag data.
  Fixes embarrassing segfaults from things like %s{size} which rpm
  has merrily passed on to sprintf() as-is.
lib/headerfmt.c
tests/rpmquery.at