format string protection/clean up (CVE-2007-1463, CVE-2007-1464)

[inkscape.git] / src / interface.cpp

diff --git a/src/interface.cpp b/src/interface.cpp
index dad1146c04d5ec94abd94e184bceff13c0c2bd1b..c7608f53a6c65f3e53d21cb3e2a77ddf0054dc7a 100644 (file)
--- a/src/interface.cpp
+++ b/src/interface.cpp
@@ -1247,7 +1247,7 @@ sp_ui_error_dialog(gchar const *message)
     gchar *safeMsg = Inkscape::IO::sanitizeString(message);
 
     dlg = gtk_message_dialog_new(NULL, GTK_DIALOG_DESTROY_WITH_PARENT, GTK_MESSAGE_ERROR,
-                                 GTK_BUTTONS_CLOSE, safeMsg);
+                                 GTK_BUTTONS_CLOSE, "%s", safeMsg);
     sp_transientize(dlg);
     gtk_window_set_resizable(GTK_WINDOW(dlg), FALSE);
     gtk_dialog_run(GTK_DIALOG(dlg));