From 32ede3cc817ee4f6806877a34a6c84ed50c31df7 Mon Sep 17 00:00:00 2001
From: Miroslav Grepl <mgrepl@redhat.com>
Date: Fri, 11 Apr 2014 18:49:33 +0200
Subject: Fix -Wformat-security issues

---
 libseaudit/src/bool_message.c | 4 ++--
 libseaudit/src/filter.c       | 2 +-
 libseaudit/src/model.c        | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

(limited to 'libseaudit/src')

diff --git a/libseaudit/src/bool_message.c b/libseaudit/src/bool_message.c
index f105cf0..d5b1e33 100644
--- a/libseaudit/src/bool_message.c
+++ b/libseaudit/src/bool_message.c
@@ -101,7 +101,7 @@ char *bool_message_to_string(const seaudit_message_t * msg, const char *date)
 		return NULL;
 	}
 	if ((misc_string = bool_message_to_misc_string(boolm)) == NULL ||
-	    apol_str_appendf(&s, &len, misc_string) < 0 || apol_str_append(&s, &len, close_brace) < 0) {
+	    apol_str_appendf(&s, &len, "%s", misc_string) < 0 || apol_str_append(&s, &len, close_brace) < 0) {
 		free(misc_string);
 		return NULL;
 	}
@@ -128,7 +128,7 @@ char *bool_message_to_string_html(const seaudit_message_t * msg, const char *dat
 		return NULL;
 	}
 	if ((misc_string = bool_message_to_misc_string(boolm)) == NULL ||
-	    apol_str_appendf(&s, &len, misc_string) < 0 || apol_str_appendf(&s, &len, "%s%s<br>", s, close_brace) < 0) {
+	    apol_str_appendf(&s, &len, "%s", misc_string) < 0 || apol_str_appendf(&s, &len, "%s%s<br>", s, close_brace) < 0) {
 		free(misc_string);
 		return NULL;
 	}
diff --git a/libseaudit/src/filter.c b/libseaudit/src/filter.c
index 298a309..c710ce4 100644
--- a/libseaudit/src/filter.c
+++ b/libseaudit/src/filter.c
@@ -1108,7 +1108,7 @@ int seaudit_filter_save_to_file(const seaudit_filter_t * filter, const char *fil
 	if ((file = fopen(filename, "w")) == NULL) {
 		return -1;
 	}
-	fprintf(file, XML_VER);
+	fprintf(file, "%s", XML_VER);
 	fprintf(file, "<view xmlns=\"http://oss.tresys.com/projects/setools/seaudit-%s/\">\n", FILTER_FILE_FORMAT_VERSION);
 	filter_append_to_file(filter, file, 1);
 	fprintf(file, "</view>\n");
diff --git a/libseaudit/src/model.c b/libseaudit/src/model.c
index 1bc4a23..4a130cb 100644
--- a/libseaudit/src/model.c
+++ b/libseaudit/src/model.c
@@ -514,7 +514,7 @@ int seaudit_model_save_to_file(const seaudit_model_t * model, const char *filena
 	if ((file = fopen(filename, "w")) == NULL) {
 		return -1;
 	}
-	fprintf(file, XML_VER);
+	fprintf(file, "%s", XML_VER);
 	fprintf(file, "<view xmlns=\"http://oss.tresys.com/projects/setools/seaudit-%s/\" name=\"%s\" match=\"%s\" show=\"%s\">\n",
 		FILTER_FILE_FORMAT_VERSION, model->name,
 		model->match == SEAUDIT_FILTER_MATCH_ALL ? "all" : "any",
-- 
cgit