https://sources.debian.org/data/main/p/plib/1.8.5-8/debian/patches/05_CVE-2012-4552.diff

diff -up plib-1.8.5/src/ssg/ssgParser.cxx~ plib-1.8.5/src/ssg/ssgParser.cxx
--- plib-1.8.5/src/ssg/ssgParser.cxx~	2008-03-11 03:06:23.000000000 +0100
+++ plib-1.8.5/src/ssg/ssgParser.cxx	2012-11-01 15:33:12.424483374 +0100
@@ -57,18 +57,16 @@ void _ssgParser::error( const char *form
   char msgbuff[ 255 ];
   va_list argp;
 
-  char* msgptr = msgbuff;
-  if (linenum)
-  {
-    msgptr += sprintf ( msgptr,"%s, line %d: ",
-      path, linenum );
-  }
-
   va_start( argp, format );
-  vsprintf( msgptr, format, argp );
+  vsnprintf( msgbuff, sizeof(msgbuff), format, argp );
   va_end( argp );
 
-  ulSetError ( UL_WARNING, "%s", msgbuff ) ;
+  if (linenum)
+  {
+    ulSetError ( UL_WARNING, "%s, line %d: %s", path, linenum, msgbuff ) ;
+  } else {
+    ulSetError ( UL_WARNING, "%s", msgbuff ) ;
+  }
 }
 
 
@@ -78,18 +76,16 @@ void _ssgParser::message( const char *fo
   char msgbuff[ 255 ];
   va_list argp;
 
-  char* msgptr = msgbuff;
-  if (linenum)
-  {
-    msgptr += sprintf ( msgptr,"%s, line %d: ",
-      path, linenum );
-  }
-
   va_start( argp, format );
-  vsprintf( msgptr, format, argp );
+  vsnprintf( msgbuff, sizeof(msgbuff), format, argp );
   va_end( argp );
 
-  ulSetError ( UL_DEBUG, "%s", msgbuff ) ;
+  if (linenum)
+  {
+    ulSetError ( UL_DEBUG, "%s, line %d: %s", path, linenum, msgbuff ) ;
+  } else {
+    ulSetError ( UL_DEBUG, "%s", msgbuff ) ;
+  }
 }
 
 // Opens the file and does a few internal calculations based on the spec.
='get' action='/guix/log/gnu/packages/sdl.scm'>
<input type='hidden' name='id' value='4a301dae2bb33782933e2f112005b5d0ea813e62'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=4a301dae2bb33782933e2f112005b5d0ea813e62'>root</a>/<a href='/guix/log/gnu?id=4a301dae2bb33782933e2f112005b5d0ea813e62'>gnu</a>/<a href='/guix/log/gnu/packages?id=4a301dae2bb33782933e2f112005b5d0ea813e62'>packages</a>/<a href='/guix/log/gnu/packages/sdl.scm?id=4a301dae2bb33782933e2f112005b5d0ea813e62'>sdl.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/sdl.scm?id=4a301dae2bb33782933e2f112005b5d0ea813e62&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-11-05 22:11:30 -0500'>2023-11-05</span></td><td><a href='/guix/commit/gnu/packages/sdl.scm?id=97f292b47f70c4744e374494cbe248ddcb139082'>gnu: sdl2: Update to 2.28.5.</a><span class='msg-avail'>...</span></td><td>John Kehayias</td></tr>
<tr><td><span title='2023-11-05 22:09:53 -0500'>2023-11-05</span></td><td><a href='/guix/commit/gnu/packages/sdl.scm?id=50521348c89140705ca157a7d77f4acda24c26c7'>gnu: sdl2: Add vulkan-loader to rpath.</a><span class='msg-avail'>...</span></td><td>dan</td></tr>
<tr><td><span title='2023-10-27 16:33:33 +0200'>2023-10-27</span></td><td><a href='/guix/commit/gnu/packages/sdl.scm?id=2ff8de3657a5c9d0abf67bb4705251b23d97702e'>gnu: Add sdl2-gamecontrollerdb.</a><span class='msg-avail'>...</span></td><td>Evgeny Pisemsky</td></tr>
<tr><td><span title='2023-08-17 18:50:14 +0800'>2023-08-17</span></td><td><a href='/guix/commit/gnu/packages/sdl.scm?id=9b283090e93f8db7bce4ce210d805959c5c318c0'>gnu: sdl2: Remove fcitx from inputs.</a><span class='msg-avail'>...</span></td><td>宋文武</td></tr>
<tr><td><span title='2023-07-16 02:00:38 +0200'>2023-07-16</span></td><td><a href='/guix/commit/gnu/packages/sdl.scm?id=d133ad764518fc5962f21f3ce10586728af4ae93'>gnu: sdl2-ttf: Update to 2.20.2.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2023-07-16 02:00:38 +0200'>2023-07-16</span></td><td><a href='/guix/commit/gnu/packages/sdl.scm?id=b6ef8b664a8610bf0b863e26725610c27cc9b7b4'>gnu: sdl2-mixer: Update to 2.6.3.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2023-07-16 02:00:37 +0200'>2023-07-16</span></td><td><a href='/guix/commit/gnu/packages/sdl.scm?id=7158276074dbdc0baac7ef8441ac26a085f45e5d'>gnu: sdl2-image: Update to 2.6.3.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>