https://sources.debian.org/data/main/a/a2ps/1:4.14-2/debian/patches/fix-format-security.diff

Index: b/lib/psgen.c
===================================================================
--- a/lib/psgen.c
+++ b/lib/psgen.c
@@ -232,7 +232,7 @@
     default:
       *buf = '\0';
       ps_escape_char (job, cp[i], buf);
-      output (jdiv, (char *) buf);
+      output (jdiv, "%s", (char *) buf);
       break;
     }
   }
Index: b/lib/output.c
===================================================================
--- a/lib/output.c
+++ b/lib/output.c
@@ -525,7 +525,7 @@
 		     expand_user_string (job, FIRST_FILE (job),
 					 (const uchar *) "Expand: requirement",
 					 (const uchar *) token));
-	output (dest, expansion);
+	output (dest, "%s", expansion);
 	continue;
       }
 
Index: b/lib/parseppd.y
===================================================================
--- a/lib/parseppd.y
+++ b/lib/parseppd.y
@@ -154,7 +154,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
 }
 
 /*
Index: b/src/parsessh.y
===================================================================
--- a/src/parsessh.y
+++ b/src/parsessh.y
@@ -740,7 +740,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, sshfilename, sshlineno, msg);
+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
 }
 
 /*
Index: b/lib/parseppd.c
===================================================================
--- a/lib/parseppd.c
+++ b/lib/parseppd.c
@@ -1707,7 +1707,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
 }
 
 /*
Index: b/src/parsessh.c
===================================================================
--- a/src/parsessh.c
+++ b/src/parsessh.c
@@ -2639,7 +2639,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, sshfilename, sshlineno, msg);
+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
 }
 
 /*
340a8263b9862ba2ccad35db74daf8605dc'>root</a>/<a href='/guix/log/gnu?id=6439c340a8263b9862ba2ccad35db74daf8605dc'>gnu</a>/<a href='/guix/log/gnu/tests?id=6439c340a8263b9862ba2ccad35db74daf8605dc'>tests</a>/<a href='/guix/log/gnu/tests/nfs.scm?id=6439c340a8263b9862ba2ccad35db74daf8605dc'>nfs.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/tests/nfs.scm?id=6439c340a8263b9862ba2ccad35db74daf8605dc&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2020-03-25 14:17:24 +0100'>2020-03-25</span></td><td><a href='/guix/commit/gnu/tests/nfs.scm?id=eb019af8d84ad168d6cb11c011842fb0c8303f20'>tests/nfs: Fix use of WAIT-FOR-FILE.</a><span class='msg-avail'>...</span></td><td>Ricardo Wurmus</td></tr>
<tr><td><span title='2020-03-16 22:58:37 +0100'>2020-03-16</span></td><td><a href='/guix/commit/gnu/tests/nfs.scm?id=a55472955d7dbe7385fb25a5c31b26f8ebfa6e93'>tests: nfs-server: Use marionette helper procedures.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-03-16 14:05:52 +0100'>2020-03-16</span></td><td><a href='/guix/commit/gnu/tests/nfs.scm?id=e8cec7cc120fc95b2e869a1834a01e257e0f63c8'>tests: nfs: Ensure 'rpcinfo' can be found.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-01-08 23:56:16 +0100'>2020-01-08</span></td><td><a href='/guix/commit/gnu/tests/nfs.scm?id=907eeac2e7d5d9c10b65038d486876e577c80d85'>services: nfs: Add nfs-service-type.</a><span class='msg-avail'>...</span></td><td>Ricardo Wurmus</td></tr>
<tr><td><span title='2018-10-18 01:12:22 +0200'>2018-10-18</span></td><td><a href='/guix/commit/gnu/tests/nfs.scm?id=39d7fdce453b0ca23ecbed72048647debbaa58a6'>services: dhcp-client: Deprecate 'dhcp-client-service' procedure.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2018-06-13 09:11:45 +0200'>2018-06-13</span></td><td><a href='/guix/commit/gnu/tests/nfs.scm?id=c24b15472baaa7ec67d48cbf296bbe5ab727b78f'>tests: Honor the return value of 'start-service'.</a><span class='msg-avail'>...</span></td><td>Clément Lassieur</td></tr>
<tr><td><span title='2017-12-06 15:02:24 +0100'>2017-12-06</span></td><td><a href='/guix/commit/gnu/tests/nfs.scm?id=fdfdecdb7ebfd05b4ae66cc5140078dbfc10fc35'>gnu, doc, tests: Use ‘bootloader-configuration’ everywhere.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2017-08-23 22:23:19 +0200'>2017-08-23</span></td><td><a href='/guix/commit/gnu/tests/nfs.scm?id=045ebb3e58d74c75f39ce47380045d3cd00359c3'>gnu: bootloader: Deprecate "device" field in favor of "target".</a><span class='msg-avail'>...</span></td><td>Andy Wingo</td></tr>
<tr><td><span title='2017-07-20 11:57:13 +0200'>2017-07-20</span></td><td><a href='/guix/commit/gnu/tests/nfs.scm?id=8b113790fa3bfd2300c737901ba161f079fedbdf'>tests: Use 'virtual-machine' records instead of monadic procedures.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2017-05-16 14:41:01 +0200'>2017-05-16</span></td><td><a href='/guix/commit/gnu/tests/nfs.scm?id=b09a8da4a2e50845a297e041762f3ff9e649c047'>bootloader: Add extlinux support.</a><span class='msg-avail'>...</span></td><td>Mathieu Othacehe</td></tr>