backport from pre3:

fix a string format vulnerability
(probably not exploitable)


svn:r2477

branches/tor-0_0_8-patches/src/or/rephist.c

@@ -287,7 +287,7 @@ void rep_hist_dump_stats(time_t now, int severity)
           break;
         }
       }
-      log(severity, buffer);
+      log(severity, "%s", buffer);
     }
   }
 }