Fix possible security vulnerability and fatal error

diff --git a/tools/heretic2/common/inout.c b/tools/heretic2/common/inout.c
index e0c14841163387ad761e1c7c0457f37de4f6a9b4..b6d272ffdf694588b7c572b0f425cae2d5e87890 100644 (file)
--- a/tools/heretic2/common/inout.c
+++ b/tools/heretic2/common/inout.c
@@ -261,7 +261,7 @@ void FPrintf( int flag, char *buf ){
        static qboolean bGotXML = false;
        char level[2];
 
-       printf( buf );
+       printf( "%s", buf );
 
        // the following part is XML stuff only.. but maybe we don't want that message to go down the XML pipe?
        if ( flag == SYS_NOXML ) {

diff --git a/tools/quake2/common/inout.c b/tools/quake2/common/inout.c
index e0c14841163387ad761e1c7c0457f37de4f6a9b4..b6d272ffdf694588b7c572b0f425cae2d5e87890 100644 (file)
--- a/tools/quake2/common/inout.c
+++ b/tools/quake2/common/inout.c
@@ -261,7 +261,7 @@ void FPrintf( int flag, char *buf ){
        static qboolean bGotXML = false;
        char level[2];
 
-       printf( buf );
+       printf( "%s", buf );
 
        // the following part is XML stuff only.. but maybe we don't want that message to go down the XML pipe?
        if ( flag == SYS_NOXML ) {