structseq_new(): Conversion of sprintf() to PyOS_snprintf() for buffer

overrun avoidance.

diff --git a/Objects/structseq.c b/Objects/structseq.c
index 7ad607b0e39da0ecc9758c8287ef41424ef6064a..2ab9b52055b09b4130a29fe5505cd5ef8bf29281 100644 (file)
--- a/Objects/structseq.c
+++ b/Objects/structseq.c
@@ -102,7 +102,8 @@ structseq_new(PyTypeObject *type, PyObject *args, PyObject *kwds)
        len = PySequence_Length(arg);
        required_len = REAL_SIZE_TP(type);
        if (len != required_len) {
-               sprintf(msgbuf,
+               PyOS_snprintf(
+                       msgbuf, sizeof(msgbuf),
                        "constructor takes exactly %d arguments (%d given)",
                        required_len,
                        len);