From 1a4ed6d3fd4e85c31b60d532637f54b6fb3bffe7 Mon Sep 17 00:00:00 2001
From: Philipp Hahn <hahn@univention.de>
Date: Fri, 25 Jan 2013 09:57:09 +0100
Subject: [PATCH] xrdp: Fix format string vulnerability

The the string being printer contains a "%", this could crash xrdp.
---
 common/log.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common/log.c b/common/log.c
index e8e005f0..d8279600 100644
--- a/common/log.c
+++ b/common/log.c
@@ -617,7 +617,7 @@ log_message(const enum logLevels lvl, const char *msg, ...)
     if (lvl <= staticLogConfig->log_level)
     {
         /* log to console */
-        g_printf(buff);
+        g_printf("%s", buff);
 
         /* log to application logfile */
 #ifdef LOG_ENABLE_THREAD