Blame SOURCES/cdparanoia-10.2-format-security.patch

3e3291
diff -Naur cdparanoia-III-10.2.orig/main.c cdparanoia-III-10.2/main.c
3e3291
--- cdparanoia-III-10.2.orig/main.c	2008-09-11 23:11:02.000000000 +0200
3e3291
+++ cdparanoia-III-10.2/main.c	2014-04-14 21:24:10.023000000 +0200
3e3291
@@ -588,10 +588,10 @@
3e3291
 	    buffer[aheadposition+19]='>';
3e3291
 	}
3e3291
    
3e3291
-	fprintf(stderr,buffer);
3e3291
+	fprintf(stderr, "%s", buffer);
3e3291
        
3e3291
 	if (logfile != NULL && function==-1) {
3e3291
-	  fprintf(logfile,buffer+1);
3e3291
+	  fprintf(logfile, "%s", buffer+1);
3e3291
 	  fprintf(logfile,"\n\n");
3e3291
 	  fflush(logfile);
3e3291
 	}