dont printf arguments given by user for security sanity

git-svn-id: svn://busybox.net/trunk/busybox@14613 69ca8d6d-28ef-0310-b511-8ec308f3f277

4 files changed, 4 insertions, 4 deletions

diff --git a/coreutils/watch.c b/coreutils/watch.c
index 9da591b48..9e0c54c7f 100644
--- a/coreutils/watch.c
+++ b/coreutils/watch.c
@@ -100,7 +100,7 @@ int watch_main(int argc, char **argv)
                         //child
                         dup2(old_stdout, STDOUT_FILENO);
                         execvp(*watched_argv, watched_argv);
-                        bb_perror_msg_and_die(*watched_argv);
+                        bb_perror_msg_and_die("%s", *watched_argv);
                 } else {
                         bb_perror_msg_and_die("vfork");
                 }
diff --git a/miscutils/mountpoint.c b/miscutils/mountpoint.c
index 38c654c6d..1248dc011 100644
--- a/miscutils/mountpoint.c
+++ b/miscutils/mountpoint.c
@@ -64,7 +64,7 @@ int mountpoint_main(int argc, char **argv)
                         }
                 }
                 if (!(opt & OPT_q))
-                        bb_perror_msg(arg);
+                        bb_perror_msg("%s", arg);
                 return EXIT_FAILURE;
         }
 }
diff --git a/miscutils/setsid.c b/miscutils/setsid.c
index 8061896f5..39be54621 100644
--- a/miscutils/setsid.c
+++ b/miscutils/setsid.c
@@ -41,6 +41,6 @@ setsid_main(int argc, char *argv[]) {
 
         execvp(argv[1], argv + 1);
 
-        bb_perror_msg_and_die(argv[1]);
+        bb_perror_msg_and_die("%s", argv[1]);
 
 }
diff --git a/util-linux/fdformat.c b/util-linux/fdformat.c
index e7dd943bb..5772e1309 100644
--- a/util-linux/fdformat.c
+++ b/util-linux/fdformat.c
@@ -85,7 +85,7 @@ int fdformat_main(int argc,char **argv)
 
         /* R_OK is needed for verifying */
         if (stat(*argv,&st) < 0 || access(*argv,W_OK | R_OK ) < 0) {
-                bb_perror_msg_and_die(*argv);
+                bb_perror_msg_and_die("%s",*argv);
         }
         if (!S_ISBLK(st.st_mode)) {
                 bb_error_msg_and_die("%s: not a block device",*argv);