common/Formatter: escape printed buffer in XMLFormatter::dump_format_va()

Fixes: http://tracker.ceph.com/issues/38121
Signed-off-by: ashitakasam <694240887@qq.com>

diff --git a/src/common/Formatter.cc b/src/common/Formatter.cc
index 8f199ef7a7b2950045d6050e5dd951229f26ccad..f77ed6b7aeeec38215ba30b53ea700be56802feb 100644 (file)
--- a/src/common/Formatter.cc
+++ b/src/common/Formatter.cc
@@ -506,7 +506,7 @@ void XMLFormatter::dump_format_va(const char* name, const char *ns, bool quoted,
 
   print_spaces();
   if (ns) {
-    m_ss << "<" << e << " xmlns=\"" << ns << "\">" << buf << "</" << e << ">";
+    m_ss << "<" << e << " xmlns=\"" << ns << "\">" << xml_stream_escaper(std::string_view(buf, len)) << "</" << e << ">";
   } else {
     m_ss << "<" << e << ">" << xml_stream_escaper(std::string_view(buf, len)) << "</" << e << ">";
   }