- fix string validation, MOPS-2010-24

diff --git a/ext/phar/stream.c b/ext/phar/stream.c
index 2b91e8df245ed5fca3eccb398fdc00c9eb89eab1..1fbbbb1b5412e08d5e90590965076ed127e52e0e 100644 (file)
--- a/ext/phar/stream.c
+++ b/ext/phar/stream.c
@@ -470,7 +470,7 @@ static int phar_stream_flush(php_stream *stream TSRMLS_DC) /* {{{ */
        if (stream->mode[0] == 'w' || (stream->mode[0] == 'r' && stream->mode[1] == '+')) {
                ret = phar_flush(((phar_entry_data *)stream->abstract)->phar, 0, 0, 0, &error TSRMLS_CC);
                if (error) {
-                       php_stream_wrapper_log_error(stream->wrapper, REPORT_ERRORS TSRMLS_CC, error);
+                       php_stream_wrapper_log_error(stream->wrapper, REPORT_ERRORS TSRMLS_CC, "%s", error);
                        efree(error);
                }
                return ret;