--- log.c	2006-09-08 16:33:01.000000000 +0200
+++ /root/log.c	2006-10-22 16:32:11.000000000 +0200
@@ -27,14 +27,14 @@
 			log_opened = 1;
 		}
 		vsnprintf(str, 256, fmt, ap);
-		syslog(LOG_INFO, str);
+		syslog(LOG_INFO, "%s", str);
 
 		if ( debug ) { 
-			fprintf(stderr,str);
-			fprintf(stderr,"\n");
+			fprintf(stderr,"%s\n", str);
 		}
 			 
 		va_end(ap);
 
 	}
 }
+