From 0592caca8a778d448a143b4b9178b3067dde4963 Mon Sep 17 00:00:00 2001 From: Simon McVittie Date: Thu, 20 May 2021 17:53:16 +0100 Subject: [PATCH] completion: Always pass a format string to flatpak_completion_debug In principle this could have been subject to a format string attack via an argument containing %n, although in practice the code that uses this format string is #if 0. Signed-off-by: Simon McVittie --- app/flatpak-complete.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/flatpak-complete.c b/app/flatpak-complete.c index 84150411..625b5296 100644 --- a/app/flatpak-complete.c +++ b/app/flatpak-complete.c @@ -632,7 +632,7 @@ flatpak_completion_new (const char *arg_line, flatpak_completion_debug ("completion_argv %i:", completion->original_argc); for (i = 0; i < completion->original_argc; i++) - flatpak_completion_debug (completion->original_argv[i]); + flatpak_completion_debug ("%s", completion->original_argv[i]); flatpak_completion_debug ("----");