2 files changed, 6 insertions, 3 deletions

diff --git a/ChangeLog b/ChangeLog
index 6cfa9b84f..e3894ffc5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -7,6 +7,9 @@
    - deraadt@cvs.openbsd.org 2006/03/27 13:03:54
      [dh.c]
      use strtonum() instead of atoi(), limit dhg size to 64k; ok djm
+   - djm@cvs.openbsd.org 2006/03/27 23:15:46
+     [sftp.c]
+     always use a format string for addargs; spotted by mouring@
 
 20060326
  - OpenBSD CVS Sync
@@ -4456,4 +4459,4 @@
    - (djm) Trim deprecated options from INSTALL. Mention UsePAM
    - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
 
-$Id: ChangeLog,v 1.4289 2006/03/31 12:09:41 djm Exp $
+$Id: ChangeLog,v 1.4290 2006/03/31 12:10:31 djm Exp $
diff --git a/sftp.c b/sftp.c
index f5212ed4f..31b71db2b 100644
--- a/sftp.c
+++ b/sftp.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sftp.c,v 1.79 2006/03/25 13:17:02 djm Exp $ */
+/* $OpenBSD: sftp.c,v 1.80 2006/03/27 23:15:46 djm Exp $ */
 /*
  * Copyright (c) 2001-2004 Damien Miller <djm@openbsd.org>
  *
@@ -1468,7 +1468,7 @@ main(int argc, char **argv)
         __progname = ssh_get_progname(argv[0]);
         memset(&args, '\0', sizeof(args));
         args.list = NULL;
-        addargs(&args, ssh_program);
+        addargs(&args, "%s", ssh_program);
         addargs(&args, "-oForwardX11 no");
         addargs(&args, "-oForwardAgent no");
         addargs(&args, "-oPermitLocalCommand no");