From c6c9e0c3acf7d702d467e9556fd3bd4775204294 Mon Sep 17 00:00:00 2001
From: Mark Pizzolato <mark@infocomm.com>
Date: Thu, 12 Apr 2012 12:18:23 -0700
Subject: [PATCH] Fixed arguments to sprintf when constructing the expansion of
 %*. Found by Maurizio De Tommaso.

---
 scp.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scp.c b/scp.c
index 9098ef55..5c80a8f6 100644
--- a/scp.c
+++ b/scp.c
@@ -1286,7 +1286,7 @@ for (; *ip && (op < oend); ) {
                                 char quote = '"';
                                 if (strchr(do_arg[i], quote))
                                     quote = '\'';
-                                sprintf(&rbuf[strlen(rbuf)], "%s%s\"", (i != 1) ? " " : "", quote, do_arg[i], quote);
+                                sprintf(&rbuf[strlen(rbuf)], "%s%s%s%s\"", (i != 1) ? " " : "", quote, do_arg[i], quote);
                                 }
                             else
                                 sprintf(&rbuf[strlen(rbuf)], "%s%s", (i != 1) ? " " : "", do_arg[i]);