Blame SOURCES/cdparanoia-10.2-format-security.patch

b9d151
diff -Naur cdparanoia-III-10.2.orig/main.c cdparanoia-III-10.2/main.c
b9d151
--- cdparanoia-III-10.2.orig/main.c	2008-09-11 23:11:02.000000000 +0200
b9d151
+++ cdparanoia-III-10.2/main.c	2014-04-14 21:24:10.023000000 +0200
b9d151
@@ -588,10 +588,10 @@
b9d151
 	    buffer[aheadposition+19]='>';
b9d151
 	}
b9d151
    
b9d151
-	fprintf(stderr,buffer);
b9d151
+	fprintf(stderr, "%s", buffer);
b9d151
        
b9d151
 	if (logfile != NULL && function==-1) {
b9d151
-	  fprintf(logfile,buffer+1);
b9d151
+	  fprintf(logfile, "%s", buffer+1);
b9d151
 	  fprintf(logfile,"\n\n");
b9d151
 	  fflush(logfile);
b9d151
 	}