From 73804d6f7e6220e220ac167bd77ef210ea6e3d68 Mon Sep 17 00:00:00 2001 From: "\"Vladimir N. Oleynik\"" Date: Tue, 28 Feb 2006 08:23:27 +0000 Subject: [PATCH] more security: don't start shell code from argv --- miscutils/eject.c | 2 +- util-linux/setarch.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/miscutils/eject.c b/miscutils/eject.c index 2643f36d5..189f54510 100644 --- a/miscutils/eject.c +++ b/miscutils/eject.c @@ -43,7 +43,7 @@ extern int eject_main(int argc, char **argv) } if (ioctl(bb_xopen(device, (O_RDONLY | O_NONBLOCK)), (flags ? CDROMCLOSETRAY : CDROMEJECT))) { - bb_perror_msg_and_die(device); + bb_perror_msg_and_die("%s", device); } return (EXIT_SUCCESS); } diff --git a/util-linux/setarch.c b/util-linux/setarch.c index 4a5853adc..33588e4ee 100644 --- a/util-linux/setarch.c +++ b/util-linux/setarch.c @@ -49,5 +49,5 @@ retry: execvp(argv[0], argv); failure: - bb_perror_msg_and_die(argv[0]); + bb_perror_msg_and_die("%s", argv[0]); }