diff -Naurp ntp-4.2.6p3/lib/isc/unix/ifiter_ioctl.c ntp-4.2.6p3.oden/lib/isc/unix/ifiter_ioctl.c
--- ntp-4.2.6p3/lib/isc/unix/ifiter_ioctl.c 2010-12-25 10:40:34.000000000 +0100
+++ ntp-4.2.6p3.oden/lib/isc/unix/ifiter_ioctl.c 2011-01-04 14:55:42.612737516 +0100
@@ -159,7 +159,7 @@ getbuf4(isc_interfaceiter_t *iter) {
break;
}
if (iter->bufsize >= IFCONF_BUFSIZE_MAX) {
- UNEXPECTED_ERROR(__FILE__, __LINE__,
+ UNEXPECTED_ERROR(__FILE__, __LINE__, "%s",
isc_msgcat_get(isc_msgcat,
ISC_MSGSET_IFITERIOCTL,
ISC_MSG_BUFFERMAX,
diff -Naurp ntp-4.2.6p3/ntpd/ntp_config.c ntp-4.2.6p3.oden/ntpd/ntp_config.c
--- ntp-4.2.6p3/ntpd/ntp_config.c 2011-01-04 14:55:30.770210499 +0100
+++ ntp-4.2.6p3.oden/ntpd/ntp_config.c 2011-01-04 14:55:42.613737392 +0100
@@ -2326,7 +2326,7 @@ config_access(
if ((RES_MSSNTP & flags) && !warned_signd) {
warned_signd = 1;
fprintf(stderr, "%s\n", signd_warning);
- msyslog(LOG_WARNING, signd_warning);
+ msyslog(LOG_WARNING, "%s", signd_warning);
}
}
}
diff -Naurp ntp-4.2.6p3/ntpd/ntp_control.c ntp-4.2.6p3.oden/ntpd/ntp_control.c
--- ntp-4.2.6p3/ntpd/ntp_control.c 2010-12-25 10:40:36.000000000 +0100
+++ ntp-4.2.6p3.oden/ntpd/ntp_control.c 2011-01-04 14:55:42.615737138 +0100
@@ -2948,7 +2948,7 @@ report_event(
" %s", str);
}
NLOG(NLOG_SYSEVENT)
- msyslog(LOG_INFO, statstr);
+ msyslog(LOG_INFO, "%s", statstr);
} else {
/*
@@ -2980,7 +2980,7 @@ report_event(
" %s", str);
}
NLOG(NLOG_PEEREVENT)
- msyslog(LOG_INFO, statstr);
+ msyslog(LOG_INFO, "%s", statstr);
}
record_proto_stats(statstr);
#if DEBUG
diff -Naurp ntp-4.2.6p3/ntpd/ntpd.c ntp-4.2.6p3.oden/ntpd/ntpd.c
--- ntp-4.2.6p3/ntpd/ntpd.c 2011-01-04 14:55:30.772210251 +0100
+++ ntp-4.2.6p3.oden/ntpd/ntpd.c 2011-01-04 14:55:42.616737012 +0100
@@ -1242,7 +1242,7 @@ library_fatal_error(const char *file, in
msyslog(LOG_ERR, "%s:%d: fatal error:", file, line);
vsnprintf(errbuf, sizeof(errbuf), format, args);
- msyslog(LOG_ERR, errbuf);
+ msyslog(LOG_ERR, "%s", errbuf);
msyslog(LOG_ERR, "exiting (due to fatal error in library)");
abort();
@@ -1264,7 +1264,7 @@ library_unexpected_error(const char *fil
msyslog(LOG_ERR, "%s:%d: unexpected error:", file, line);
vsnprintf(errbuf, sizeof(errbuf), format, args);
- msyslog(LOG_ERR, errbuf);
+ msyslog(LOG_ERR, "%s", errbuf);
if (++unexpected_error_cnt == MAX_UNEXPECTED_ERRORS)
{
