dont printf arguments given by user for security sanity

2006-03-23 02:07:20 +00:00
parent 64bef2ab9c
commit 948a09d6f2
4 changed files with 4 additions and 4 deletions
--- a/coreutils/watch.c
+++ b/coreutils/watch.c
@ -100,7 +100,7 @@ int watch_main(int argc, char **argv)
 			//child
 			dup2(old_stdout, STDOUT_FILENO);
 			execvp(*watched_argv, watched_argv);
-			bb_perror_msg_and_die(*watched_argv);
+			bb_perror_msg_and_die("%s", *watched_argv);
 		} else {
 			bb_perror_msg_and_die("vfork");
 		}