Replace sprintf with snprintf in ptools.c
Prevents buffer overflow if paramname is longer than 254 bytes. charBuff[i] is 258 bytes, sprintf(charBuff[i], "key%s", paramname) can overflow. Fixes #217
This commit is contained in:
parent
465d5b9fb6
commit
7ef4417694
|
|
@ -139,7 +139,7 @@ int ptools_create_backend_event(const char *binapi, const char *category,
|
|||
strcat(keyParams, params->Params[i].paramname);
|
||||
}
|
||||
|
||||
sprintf(charBuff[i], "key%s", params->Params[i].paramname);
|
||||
snprintf(charBuff[i], sizeof(charBuff[i]), "key%s", params->Params[i].paramname);
|
||||
|
||||
if (params->Params[i].paramtype == 0) {
|
||||
paramsLocal[mpCnt + i] =
|
||||
|
|
|
|||
Loading…
Reference in New Issue