File 4f5577dd4672d228e4180f06bdbd66f343ea45e0.patch of Package mxml.openSUSE_Leap_15.1_Update
From 4f5577dd4672d228e4180f06bdbd66f343ea45e0 Mon Sep 17 00:00:00 2001 From: Michael R Sweet <michael.r.sweet@gmail.com> Date: Mon, 3 Dec 2018 11:21:39 -0500 Subject: [PATCH] Fix potential buffer overflow when writing a double (Issue #233) --- CHANGES.md | 2 ++ mxml-file.c | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/mxml-file.c b/mxml-file.c index 3c2b0a8..7a2a329 100644 --- a/mxml-file.c +++ b/mxml-file.c @@ -2881,7 +2881,7 @@ mxml_write_node(mxml_node_t *node, /* I - Node to write */ col ++; } - sprintf(s, "%d", current->value.integer); + snprintf(s, sizeof(s), "%d", current->value.integer); if (mxml_write_string(s, p, putc_cb) < 0) return (-1); @@ -2911,7 +2911,7 @@ mxml_write_node(mxml_node_t *node, /* I - Node to write */ col ++; } - sprintf(s, "%f", current->value.real); + snprintf(s, sizeof(s), "%f", current->value.real); if (mxml_write_string(s, p, putc_cb) < 0) return (-1);