(gamedown): Printed down message with pr(), as a printf()-like format

string!  This reads and formats junk from the stack when message
contains '%', and can even crash.  Use prnf() instead.  Catched by Ron
Koenderink.

diff --git a/src/lib/player/empdis.c b/src/lib/player/empdis.c
index 5c63ca32dfac5a8ce023f48b12f32573938b0bc9..7d9c664516447f5a829e4a31ac39453408a2e8fc 100644 (file)
--- a/src/lib/player/empdis.c
+++ b/src/lib/player/empdis.c
@@ -177,7 +177,7 @@ gamedown(void)
     if (tgm.tel_length >= (long)sizeof(buf))
        tgm.tel_length = sizeof(buf) - 1;
     buf[tgm.tel_length] = 0;
-    pr(buf);
+    prnf(buf);
     pr("\nThe game is down\n");
     (void)close(downf);
     return 1;