PyWin_FindRegisteredModule(): Conversion of sprintf() to

PyOS_snprintf() for buffer overrun avoidance.

diff --git a/PC/import_nt.c b/PC/import_nt.c
index 58cd9e4850647a7cb3b14d4627fa3ef4133e3918..f937df86bc8e80375bcbc9b607f6ef8489282d0a 100644 (file)
--- a/PC/import_nt.c
+++ b/PC/import_nt.c
@@ -49,9 +49,9 @@ FILE *PyWin_FindRegisteredModule(const char *moduleName,
         * also no heap fragmentation!
         */
        moduleKey = alloca(bufSize); 
-       sprintf(moduleKey,
-               "Software\\Python\\PythonCore\\%s\\Modules\\%s%s",
-               PyWin_DLLVersionString, moduleName, debugString);
+       PyOS_snprintf(moduleKey, bufSize,
+                     "Software\\Python\\PythonCore\\%s\\Modules\\%s%s",
+                     PyWin_DLLVersionString, moduleName, debugString);
 
        modNameSize = pathLen;
        regStat = RegQueryValue(keyBase, moduleKey, pathBuf, &modNameSize);