Fix a format string vulnerability if MALLOC_LOG is set.

(cherry picked from commit e443fd3)
FauxFaux · Oct 17, 2015 · 3a43bec · 3a43bec
1 parent 9c8a3cb
commit 3a43bec
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/misc.c b/misc.c
@@ -736,7 +736,7 @@ void *safemalloc(size_t n, size_t size)
 #else
 	strcpy(str, "Out of memory!");
 #endif
-	modalfatalbox(str);
+	modalfatalbox("%s", str);
     }
 #ifdef MALLOC_LOG
     if (fp)
@@ -778,7 +778,7 @@ void *saferealloc(void *ptr, size_t n, size_t size)
 #else
 	strcpy(str, "Out of memory!");
 #endif
-	modalfatalbox(str);
+	modalfatalbox("%s", str);
     }
 #ifdef MALLOC_LOG
     if (fp)