Author: Ole Streicher <debian@liska.ath.cx>
Description: Fix format security errors
--- a/vimos/moses.c
+++ b/vimos/moses.c
@@ -5463,7 +5463,7 @@
         *err = sqrt(*err);
     
         if (ids == NULL) {
-            cpl_msg_debug(cpl_error_get_where(), cpl_error_get_message());
+            cpl_msg_debug(cpl_error_get_where(), "%s", cpl_error_get_message());
             cpl_msg_debug(func, "Fitting IDS");
             cpl_error_set_where(func);
             if (rejection) {
--- a/vimos/fors_dfs.c
+++ b/vimos/fors_dfs.c
@@ -665,7 +665,7 @@
     if (frame) {
         image = cpl_image_load(cpl_frame_get_filename(frame), type, 0, ext);
         if (image == NULL) {
-            cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+            cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
             cpl_msg_error(func, "Cannot load image %s",
                           cpl_frame_get_filename(frame));
         }
@@ -720,7 +720,7 @@
     if (frame) {
         table = cpl_table_load(cpl_frame_get_filename(frame), ext, 1);
         if (table == NULL) {
-            cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+            cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
             cpl_msg_error(func, "Cannot load table %s",
                           cpl_frame_get_filename(frame));
         }
@@ -771,7 +771,7 @@
     if (frame) {
         plist = cpl_propertylist_load(cpl_frame_get_filename(frame), ext);
         if (plist == NULL) {
-            cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+            cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
             cpl_msg_error(func, "Cannot load header from %s",
                           cpl_frame_get_filename(frame));
         }
@@ -827,7 +827,7 @@
 
 
     if (category == NULL || frameset == NULL || image == NULL) {
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         cpl_error_set(func, CPL_ERROR_NULL_INPUT);
         return -1;
     }
@@ -847,7 +847,7 @@
     cpl_frame_set_group(frame, CPL_FRAME_GROUP_PRODUCT);
     cpl_frame_set_level(frame, CPL_FRAME_LEVEL_FINAL);
     if (cpl_error_get_code()) {
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         cpl_msg_error(func, "Cannot initialise the product frame");
         cpl_frame_delete(frame);
         cpl_free(filename);
@@ -871,7 +871,7 @@
     if (cpl_dfs_setup_product_header(plist, frame, frameset, parlist,
                                      recipename, version, "PRO-1.15")) {
 #endif
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         cpl_msg_error(func, "Problem with product %s FITS header definition",
                       category);
         if (header == NULL)
@@ -899,7 +899,7 @@
 
     if (cpl_image_save(image, filename, CPL_BPP_IEEE_FLOAT, plist,
                        CPL_IO_DEFAULT)) {
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         cpl_msg_error(func, "Cannot save product %s to disk", filename);
         if (header == NULL)
             cpl_propertylist_delete(plist);
@@ -965,7 +965,7 @@
 
     if (category == NULL || frameset == NULL || table == NULL) {
         cpl_error_set(func, CPL_ERROR_NULL_INPUT);
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         return -1;
     }
 
@@ -991,7 +991,7 @@
     cpl_frame_set_group(frame, CPL_FRAME_GROUP_PRODUCT);
     cpl_frame_set_level(frame, CPL_FRAME_LEVEL_FINAL);
     if (cpl_error_get_code()) {
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         cpl_msg_error(func, "Cannot initialise the product frame");
         cpl_frame_delete(frame);
         cpl_free(filename);
@@ -1015,7 +1015,7 @@
     if (cpl_dfs_setup_product_header(plist, frame, frameset, parlist,
                                      recipename, version, "PRO-1.15")) {
 #endif
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         cpl_msg_error(func, "Problem with product %s FITS header definition",
                       category);
         if (header == NULL)
@@ -1041,7 +1041,7 @@
     
     
     if (cpl_table_save(table, plist, NULL, filename, CPL_IO_DEFAULT)) {
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         cpl_msg_error(func, "Cannot save product %s to disk", filename);
         if (header == NULL)
             cpl_propertylist_delete(plist);
--- a/vimos/vimos_calib_impl.c
+++ b/vimos/vimos_calib_impl.c
@@ -970,7 +970,7 @@
     slits = mos_locate_spectra(refmask);
 
     if (!slits) {
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         vimos_calib_exit("No slits could be detected!");
     }
 
@@ -2057,7 +2057,7 @@
     cpl_table_delete(slits); slits = NULL;
 
     if (cpl_error_get_code()) {
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         vimos_calib_exit(NULL);
     }
 
--- a/vimos/vimos_science_impl.c
+++ b/vimos/vimos_science_impl.c
@@ -1561,7 +1561,7 @@
     cpl_propertylist_delete(header); header = NULL;
 
     if (cpl_error_get_code()) {
-        cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+        cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
         vimos_science_exit(NULL);
     }
     else 
--- a/vimos/vimos_calib_mult.c
+++ b/vimos/vimos_calib_mult.c
@@ -1960,7 +1960,7 @@
         cpl_table_delete(subslits); subslits = NULL;
 
         if (cpl_error_get_code()) {
-            cpl_msg_error(cpl_error_get_where(), cpl_error_get_message());
+            cpl_msg_error(cpl_error_get_where(), "%s", cpl_error_get_message());
             vimos_calmul_exit(NULL);
         }
     }