===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/awk/run.c,v
retrieving revision 1.26
retrieving revision 1.27
diff -c -r1.26 -r1.27
*** src/usr.bin/awk/run.c	2004/12/30 02:08:35	1.26
--- src/usr.bin/awk/run.c	2008/02/27 17:19:34	1.27
***************
*** 1,4 ****
! /*	$OpenBSD: run.c,v 1.26 2004/12/30 02:08:35 millert Exp $	*/
  /****************************************************************
  Copyright (C) Lucent Technologies 1997
  All Rights Reserved
--- 1,4 ----
! /*	$OpenBSD: run.c,v 1.27 2008/02/27 17:19:34 deraadt Exp $	*/
  /****************************************************************
  Copyright (C) Lucent Technologies 1997
  All Rights Reserved
***************
*** 843,848 ****
--- 843,850 ----
  			if (isalpha((uschar)*s) && *s != 'l' && *s != 'h' && *s != 'L')
  				break;	/* the ansi panoply */
  			if (*s == '*') {
+ 				if (a == NULL)
+ 					FATAL("not enough args in printf(%s)", os);
  				x = execute(a);
  				a = a->nnext;
  				snprintf(t-1, fmt + fmtsz - (t-1), "%d", fmtwd=(int) getfval(x));