diff --git a/ChangeLog b/ChangeLog
index 86f756423..3a84d27ed 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+20130109
+ - (djm) OpenBSD CVS Sync
+   - dtucker@cvs.openbsd.org 2012/12/14 05:26:43
+     [auth.c]
+     use correct string in error message; from rustybsd at gmx.fr
+
 20121217
  - (dtucker) [Makefile.in] Add some scaffolding so that the new regress
    tests will work with VPATH directories.
diff --git a/auth.c b/auth.c
index 7bc6f4021..f5e2d3d2e 100644
--- a/auth.c
+++ b/auth.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth.c,v 1.98 2012/12/02 20:34:09 djm Exp $ */
+/* $OpenBSD: auth.c,v 1.99 2012/12/14 05:26:43 dtucker Exp $ */
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
  *
@@ -494,13 +494,12 @@ static int
 secure_filename(FILE *f, const char *file, struct passwd *pw,
     char *err, size_t errlen)
 {
-	char buf[MAXPATHLEN];
 	struct stat st;
 
 	/* check the open file to avoid races */
 	if (fstat(fileno(f), &st) < 0) {
 		snprintf(err, errlen, "cannot stat file %s: %s",
-		    buf, strerror(errno));
+		    file, strerror(errno));
 		return -1;
 	}
 	return auth_secure_path(file, &st, pw->pw_dir, pw->pw_uid, err, errlen);