fix - protect from uncontrolled format string

Protect from string format attack: https://owasp.org/www-community/attacks/Format_string_attack
oshai · Dec 18, 2023 · 24baa34 · 24baa34
1 parent 433d4c3
commit 24baa34
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/nativeMain/kotlin/io/github/oshai/kotlinlogging/ConsoleOutputAppender.kt b/src/nativeMain/kotlin/io/github/oshai/kotlinlogging/ConsoleOutputAppender.kt
@@ -6,7 +6,7 @@ import platform.posix.stderr
 public object ConsoleOutputAppender : FormattingAppender() {
   override fun logFormattedMessage(loggingEvent: KLoggingEvent, formattedMessage: Any?) {
     if (loggingEvent.level == Level.ERROR) {
-      fprintf(stderr, "$formattedMessage\n")
+      fprintf(stderr, "%s\n", formattedMessage.toString())
     } else {
       println(formattedMessage)
     }