From 4a7360d29be53dc8ab4ccd2cd8f508cd21ed1c7c Mon Sep 17 00:00:00 2001 From: Johannes Schickel Date: Fri, 22 Apr 2011 21:46:38 +0200 Subject: SCUMM: Do not pass non-string literal but "%s" + string to displayMessage. Since displayMessages usualy vsnprintf internally it is not quite safe to pass any string to it, since it might include a format argument like %n, which is unsafe. --- engines/scumm/scumm.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'engines/scumm') diff --git a/engines/scumm/scumm.cpp b/engines/scumm/scumm.cpp index 7108aabd21..920887e387 100644 --- a/engines/scumm/scumm.cpp +++ b/engines/scumm/scumm.cpp @@ -2494,7 +2494,7 @@ void ScummEngine_v90he::runBootscript() { void ScummEngine::startManiac() { debug(0, "stub startManiac()"); - displayMessage(0, _("Usually, Maniac Mansion would start now. But ScummVM doesn't do that yet. To play it, go to 'Add Game' in the ScummVM start menu and select the 'Maniac' directory inside the Tentacle game directory.")); + displayMessage(0, "%s", _("Usually, Maniac Mansion would start now. But ScummVM doesn't do that yet. To play it, go to 'Add Game' in the ScummVM start menu and select the 'Maniac' directory inside the Tentacle game directory.")); } #pragma mark - -- cgit v1.2.3