From: Kern Sibbald <kern@sibbald.com>
Date: Mon, 3 Feb 2003 16:23:20 +0000 (+0000)
Subject: Fix possible syslog() exploit
X-Git-Tag: Release-1.30~132
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=fc26377e9d9eb57fd56edc0147d36c43b07d3866;p=bacula%2Fbacula

Fix possible syslog() exploit


git-svn-id: https://bacula.svn.sourceforge.net/svnroot/bacula/trunk@335 91ce42f0-d328-0410-95d8-f526ca767f89
---

diff --git a/bacula/src/lib/message.c b/bacula/src/lib/message.c
index 6d708aa9b1..b64036bd76 100755
--- a/bacula/src/lib/message.c
+++ b/bacula/src/lib/message.c
@@ -577,8 +577,10 @@ void dispatch_message(void *vjcr, int type, int level, char *msg)
 		break;
 	     case MD_SYSLOG:
                 Dmsg1(400, "SYSLOG for collowing msg: %s\n", msg);
-		/* We really should do an openlog() here */
-		syslog(LOG_DAEMON|LOG_ERR, msg);
+		/*
+		 * We really should do an openlog() here.  
+		 */
+                syslog(LOG_DAEMON|LOG_ERR, "%s", msg);
 		break;
 	     case MD_OPERATOR:
                 Dmsg1(400, "OPERATOR for collowing msg: %s\n", msg);