github-code-scanning[bot] commented on code in PR #7368:
URL: https://github.com/apache/geode/pull/7368#discussion_r915740792


##########
geode-core/src/main/java/org/apache/geode/distributed/AbstractLauncher.java:
##########
@@ -392,20 +393,20 @@
   }
 
   /**
-   * Prints the specified informational message to standard err, replacing any 
placeholder values
+   * Prints the specified informational message to standard out, replacing any 
placeholder values
    * with the specified arguments on output.
    *
-   * @param message the String value written to standard err.
+   * @param message the String value written to standard out.
    * @param args an Object array containing arguments to replace the 
placeholder values in the
    *        message.
-   * @see java.lang.System#err
+   * @see java.lang.System#out
    * @see #debug(String, Object...)
    */
   protected void info(final Object message, final Object... args) {
     if (args != null && args.length > 0) {
-      System.err.printf(message.toString(), args);
+      System.out.printf(message.toString(), args);

Review Comment:
   ## Use of externally-controlled format string
   
   [User-provided value](1) flows to here and is used in a format string.
   [User-provided value](2) flows to here and is used in a format string.
   [User-provided value](3) flows to here and is used in a format string.
   
   [Show more 
details](https://github.com/apache/geode/security/code-scanning/89)



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@geode.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to