[rt #71653] i_log_entry() used the supplied string as a format string

diff --git a/Changes b/Changes
index ef24e99fd76c77c8a83aa74c32647c2e008a36b2..dccffa3ca38c522e325ab2f17f561c29db4e655f 100644 (file)
--- a/Changes
+++ b/Changes
@@ -17,6 +17,10 @@ Bug fixes:
  - apply the last of the Debian unforwarded spelling fixes
    https://rt.cpan.org/Ticket/Display.html?id=70656
 
+ - the log() method used its message parameter as a C level format
+   string.
+   https://rt.cpan.org/Ticket/Display.html?id=71653
+
 Imager 0.85_01 - 10 Oct 2011
 ==============
 

diff --git a/Imager.xs b/Imager.xs
index 9716a563af2115102b7679d3346c992132b44048..f37bb0ffab751a15c85129b25b689ebbdeee2499 100644 (file)
--- a/Imager.xs
+++ b/Imager.xs
@@ -131,7 +131,7 @@ void my_SvREFCNT_dec(void *p) {
 
 static void
 i_log_entry(char *string, int level) {
-  mm_log((level, string));
+  mm_log((level, "%s", string));
 }