printf() arguments shouldn't be passed straight from user supplied data.

(Security thingy.)
2005-12-12 06:49:33 +00:00 · 2005-12-12 06:49:33 +00:00 · cdbae77823
parent 37310ea057
commit cdbae77823
1 changed files with 1 additions and 1 deletions
--- a/coreutils/ln.c
+++ b/coreutils/ln.c
@ -106,7 +106,7 @@ extern int ln_main(int argc, char **argv)
 		}

 		if (link_func(*argv, src) != 0) {
-			bb_perror_msg(src);
+			bb_perror_msg("%s", src);
 			status = EXIT_FAILURE;
 		}