Fix insecure use of format string.

Change-Id: I6cd282d5780e418bea7a07d4639c035a98b3ed65
Reviewed-by: Simon Hausmann <simon.hausmann@digia.com>

diff --git a/qv4isel_masm.cpp b/qv4isel_masm.cpp
index cf0e06c..9741f01 100644 (file)
--- a/qv4isel_masm.cpp
+++ b/qv4isel_masm.cpp
@@ -147,9 +147,7 @@ void InstructionSelection::operator()(IR::Function *function)
 #endif
 
     QByteArray name = _function->name->toUtf8();
-    if (name.startsWith('%'))
-        name.prepend('%');
-    _function->codeRef = linkBuffer.finalizeCodeWithDisassembly(name.data());
+    _function->codeRef = linkBuffer.finalizeCodeWithDisassembly("%s", name.data());
 
     WTF::setDataFile(stderr);
 #if OS(LINUX)