From 948a09d6f288144744ebe281bc18c4bf1a9fac58 Mon Sep 17 00:00:00 2001
From: Mike Frysinger
Date: Thu, 23 Mar 2006 02:07:20 +0000
Subject: dont printf arguments given by user for security sanity

---
 util-linux/fdformat.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'util-linux')

diff --git a/util-linux/fdformat.c b/util-linux/fdformat.c
index e7dd943..5772e13 100644
--- a/util-linux/fdformat.c
+++ b/util-linux/fdformat.c
@@ -85,7 +85,7 @@ int fdformat_main(int argc,char **argv)
 
 	/* R_OK is needed for verifying */
 	if (stat(*argv,&st) < 0 || access(*argv,W_OK | R_OK ) < 0) {
-		bb_perror_msg_and_die(*argv);
+		bb_perror_msg_and_die("%s",*argv);
 	}
 	if (!S_ISBLK(st.st_mode)) {
 		bb_error_msg_and_die("%s: not a block device",*argv);
-- 
cgit v1.1