Avoid sprintf buffer overflow if more than 9999 arguments.

diff --git a/Python/bltinmodule.c b/Python/bltinmodule.c
index 3fdaac9736f5eda112afdef617bae6541ca46fbd..fd8dc803cf55d176ef531eab95848bb0a1c9282f 100644 (file)
--- a/Python/bltinmodule.c
+++ b/Python/bltinmodule.c
@@ -658,7 +658,7 @@ builtin_map(self, args)
                if (! (sqp->sqf = sqp->seq->ob_type->tp_as_sequence)) {
                        static char errmsg[] =
                            "argument %d to map() must be a sequence object";
-                       char errbuf[sizeof(errmsg) + 3];
+                       char errbuf[sizeof(errmsg) + 25];
 
                        sprintf(errbuf, errmsg, i+2);
                        PyErr_SetString(PyExc_TypeError, errbuf);