* sysdep.c: lprintf(): Bug 124: Fix remote format string vulnerability

[citadel.git] / citadel / sysdep.c

diff --git a/citadel/sysdep.c b/citadel/sysdep.c
index d52b920bea8659ee4897e66950fedb766fe050d4..fd9b3ad964d527664a8c299af186cedcfeebeff8 100644 (file)
--- a/citadel/sysdep.c
+++ b/citadel/sysdep.c
@@ -121,7 +121,7 @@ void lprintf(enum LogLevel loglevel, const char *format, ...) {
                                snprintf(buf, 6, "[%3d]", CC->cs_pid);
                                buf[5] = ' ';
                        }
-                       syslog(loglevel, buf);
+                       syslog(loglevel, "%s", buf);
                }
        }
        else if (loglevel <= verbosity) {