printf() arguments shouldn't be passed straight from user supplied data.

(Security thingy.)


git-svn-id: svn://busybox.net/trunk/busybox@12841 69ca8d6d-28ef-0310-b511-8ec308f3f277

1 files changed, 1 insertions, 1 deletions

diff --git a/coreutils/ln.c b/coreutils/ln.c
index 6751e9093..dcb70d40f 100644
--- a/coreutils/ln.c
+++ b/coreutils/ln.c
@@ -106,7 +106,7 @@ extern int ln_main(int argc, char **argv)
                 }
 
                 if (link_func(*argv, src) != 0) {
-                        bb_perror_msg(src);
+                        bb_perror_msg("%s", src);
                         status = EXIT_FAILURE;
                 }