more security: don't start shell code from argv

git-svn-id: svn://busybox.net/trunk/busybox@14360 69ca8d6d-28ef-0310-b511-8ec308f3f277

2 files changed, 2 insertions, 2 deletions

diff --git a/miscutils/eject.c b/miscutils/eject.c
index 2643f36d5..189f54510 100644
--- a/miscutils/eject.c
+++ b/miscutils/eject.c
@@ -43,7 +43,7 @@ extern int eject_main(int argc, char **argv)
         }
         if (ioctl(bb_xopen(device, (O_RDONLY | O_NONBLOCK)),
                                 (flags ? CDROMCLOSETRAY : CDROMEJECT))) {
-                bb_perror_msg_and_die(device);
+                bb_perror_msg_and_die("%s", device);
         }
         return (EXIT_SUCCESS);
 }
diff --git a/util-linux/setarch.c b/util-linux/setarch.c
index 4a5853adc..33588e4ee 100644
--- a/util-linux/setarch.c
+++ b/util-linux/setarch.c
@@ -49,5 +49,5 @@ retry:
         execvp(argv[0], argv);
 
 failure:
-        bb_perror_msg_and_die(argv[0]);
+        bb_perror_msg_and_die("%s", argv[0]);
 }