Security fix in Udm_Set_Agent_Param function.

diff --git a/ext/mnogosearch/php_mnogo.c b/ext/mnogosearch/php_mnogo.c
index 1058a939384bd5813717d51546baea93a1a2dc7c..56f0f4faf0bf21b595b5e8bb5ea7478c497f5d56 100644 (file)
--- a/ext/mnogosearch/php_mnogo.c
+++ b/ext/mnogosearch/php_mnogo.c
@@ -607,7 +607,7 @@ DLEXPORT PHP_FUNCTION(udm_set_agent_param)
 #if UDM_VERSION_ID > 30112
 
                case UDM_PARAM_VARDIR:
-                       sprintf(Agent->Conf->vardir,"%s%s",val,UDMSLASHSTR);
+                       udm_snprintf(Agent->Conf->vardir,sizeof(Agent->Conf->vardir)-1,"%s%s",val,UDMSLASHSTR);
 
                        break;