Prevent against format string attack by adding third arg to syslog()

diff --git a/lib/critical.c b/lib/critical.c
index c6971ded2266328c5a95e5517748eb4e92a47b2a..c1410e17c1e17b917597e5d50cfbd696eaf75e84 100644 (file)
--- a/lib/critical.c
+++ b/lib/critical.c
@@ -116,7 +116,7 @@ void send_zgram(char *inst, char *msg)
   if (buf)
     {
       sprintf(buf, "MOIRA: %s %s", inst, msg);
-      syslog(LOG_ERR, buf);
+      syslog(LOG_ERR, "%s", buf);
       free(buf);
     }
 #endif