From dc4ec2df4d798d4903ef09f6be713a34da4d77c4 Mon Sep 17 00:00:00 2001 From: brenosilva Date: Wed, 29 Aug 2012 12:16:32 +0000 Subject: [PATCH] Fixed format string issue in ngx_log_error --- nginx/modsecurity/ngx_http_modsecurity_module.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/nginx/modsecurity/ngx_http_modsecurity_module.c b/nginx/modsecurity/ngx_http_modsecurity_module.c index 8d0752bd..ddf4ea7d 100644 --- a/nginx/modsecurity/ngx_http_modsecurity_module.c +++ b/nginx/modsecurity/ngx_http_modsecurity_module.c @@ -157,7 +157,7 @@ ngx_http_modsecurity_merge_loc_conf(ngx_conf_t *cf, void *parent, void modsecLog(void *obj, int level, char *str) { if(obj != NULL) - ngx_log_error(NGX_LOG_INFO, (ngx_log_t *)obj, 0, str); + ngx_log_error(NGX_LOG_INFO, (ngx_log_t *)obj, 0, "%s", str); } /* @@ -337,7 +337,7 @@ static ngx_int_t ngx_http_modsecurity_access_handler(ngx_http_request_t *req) const char *msg = modsecProcessConfig(cf->config, path); if(msg != NULL) - ngx_log_error(NGX_LOG_INFO, req->connection->log, 0, msg); + ngx_log_error(NGX_LOG_INFO, req->connection->log, 0, "%s", msg); } } @@ -397,7 +397,7 @@ static ngx_int_t ngx_http_modsecurity_access_handler(ngx_http_request_t *req) apr_table_setn(r->subprocess_env, "UNIQUE_ID", "12345"); - ngx_log_error(NGX_LOG_INFO, req->connection->log, 0, r->uri); + ngx_log_error(NGX_LOG_INFO, req->connection->log, 0, "%s", r->uri); int status = modsecProcessRequest(r); ngx_log_error(NGX_LOG_INFO, req->connection->log, 0, "status: %d", status);