don't allow a format string attack via endasu sequence, heh

3 years ago · 7df761c041
parent a14a5271ac
commit 7df761c041
1 changed files with 1 additions and 1 deletions
--- a/src/lib/render.c
+++ b/src/lib/render.c
@ -1139,7 +1139,7 @@ notcurses_rasterize_inner(notcurses* nc, ncpile* p, FILE* out, unsigned* asu){
    if(nc->rstate.mstrsize >= MIN_ASU_SIZE){
      const char* endasu = get_escape(&nc->tcache, ESCAPE_ESU);
      if(endasu){
-        if(fprintf(out, endasu) < 0 || fflush(out)){
+        if(fprintf(out, "%s", endasu) < 0 || fflush(out)){
          return -1;
        }
      }else{