080a160c7b9595d516c9c70e83689a09b60839d0
galt
  Mon Jun 3 12:16:53 2013 -0700
fix SQL Injection
diff --git src/hg/qa/getChroms.c src/hg/qa/getChroms.c
index ec342eb..01c6f33 100644
--- src/hg/qa/getChroms.c
+++ src/hg/qa/getChroms.c
@@ -13,31 +13,31 @@
 errAbort(
     "getChroms - print chrom names\n"
     "usage:\n"
     "    getChroms database\n");
 }
 
 
 void getChroms()
 {
 char query[512];
 struct sqlConnection *conn = hAllocConn(db);
 struct sqlResult *sr;
 char **row;
 struct chromInfo *el;
 
-safef(query, sizeof(query), "select chrom, size from chromInfo");
+sqlSafef(query, sizeof(query), "select chrom, size from chromInfo");
 sr = sqlGetResult(conn, query);
 while ((row = sqlNextRow(sr)) != NULL)
     {
     el = chromInfoLoad(row);
     printf("chrom = %s, size = %d\n", el->chrom, el->size);
     }
 sqlFreeResult(&sr);
 hFreeConn(&conn);
 }
 
 int main(int argc, char *argv[])
 {
 if (argc != 2)
     usage();