Fix by Tim Robbins <fyre@box3n.gumbynet.org> to prevent bad format

strings from being passed to syslog(3).

diff --git a/logger.c b/logger.c
index 2c460cc077741cd21307140d1d4e4b8ddf49c542..8e341efe9b58c522be2b57f66ef7a74f18f29edc 100644 (file)
--- a/logger.c
+++ b/logger.c
@@ -156,7 +156,7 @@ extern int logger_main(int argc, char **argv)
        }
 
        openlog(name, option, (pri | LOG_FACMASK));
-       syslog(pri, message);
+       syslog(pri, "%s", message);
        closelog();
 
        return EXIT_SUCCESS;

diff --git a/sysklogd/logger.c b/sysklogd/logger.c
index 2c460cc077741cd21307140d1d4e4b8ddf49c542..8e341efe9b58c522be2b57f66ef7a74f18f29edc 100644 (file)
--- a/sysklogd/logger.c
+++ b/sysklogd/logger.c
@@ -156,7 +156,7 @@ extern int logger_main(int argc, char **argv)
        }
 
        openlog(name, option, (pri | LOG_FACMASK));
-       syslog(pri, message);
+       syslog(pri, "%s", message);
        closelog();
 
        return EXIT_SUCCESS;