- (djm) [auth1.c] Fix format string vulnerability in protocol 1 PAM

[openssh.git] / auth1.c

diff --git a/auth1.c b/auth1.c
index 834ef0452b1560029c9740509c49780243d0ca63..b8a25587232781b79eba9e024388c3bafe5ac879 100644 (file)
--- a/auth1.c
+++ b/auth1.c
@@ -354,7 +354,7 @@ do_authloop(Authctxt *authctxt)
                                        msg[len] = '\0';
                        else
                                msg = "Access denied.";
-                       packet_disconnect(msg);
+                       packet_disconnect("%s", msg);
                }
 #endif