Prevent against format string attacks by adding third arg to syslog()

diff --git a/update/update_server.c b/update/update_server.c
index af0cc526c66d32f6d86200e5228c8e4841f79504..f50fb525b1433dab9d3d0cc96970a15dd6bba544 100644 (file)
--- a/update/update_server.c
+++ b/update/update_server.c
@@ -245,5 +245,5 @@ static void syslog_com_err_proc(const char *progname, long code,
   buf[bufsiz] = '\0';
 
   vsnprintf(buf, bufsiz, fmt, args);
-  syslog(LOG_NOTICE, buf);
+  syslog(LOG_NOTICE, "%s", buf);
 }