(show_motd): Printed motd with pr(), as a printf()-like format string!

This reads and formats junk from the stack when motd contains '%', and
can even crash.  Use prnf() instead.

diff --git a/src/lib/player/player.c b/src/lib/player/player.c
index 4961cecdda71b8cd48abeb251ea0b229a4fa73cd..8175c5082f338c4915f25ff016e48f291a4e10e7 100644 (file)
--- a/src/lib/player/player.c
+++ b/src/lib/player/player.c
@@ -366,7 +366,7 @@ show_motd(void)
     if (tgm.tel_length >= (long)sizeof(buf))
        tgm.tel_length = sizeof(buf) - 1;
     buf[tgm.tel_length] = 0;
-    pr(buf);
+    prnf(buf);
     (void)close(upf);
     return RET_OK;
 }