From a69661279cf8e48b6fd16b4109982ca6e96f1149 Mon Sep 17 00:00:00 2001 From: zacheiss Date: Thu, 21 Sep 2000 07:36:40 +0000 Subject: [PATCH] Prevent against format string attack by adding third arg to syslog() --- lib/critical.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/critical.c b/lib/critical.c index c6971ded..c1410e17 100644 --- a/lib/critical.c +++ b/lib/critical.c @@ -116,7 +116,7 @@ void send_zgram(char *inst, char *msg) if (buf) { sprintf(buf, "MOIRA: %s %s", inst, msg); - syslog(LOG_ERR, buf); + syslog(LOG_ERR, "%s", buf); free(buf); } #endif -- 2.45.1