Use snprintf() for paranoia

diff --git a/sudo.c b/sudo.c
index aa7f7e05d58c06dfda489b050a68ab067aa67f77..c7bc23dd73aca4a72a373d46962ba0ae5fcc384d 100644 (file)
--- a/sudo.c
+++ b/sudo.c
@@ -525,7 +525,7 @@ init_vars(sudo_mode)
        char pw_name[MAX_UID_T_LEN + 1];
 
        pw.pw_uid = getuid();
-       (void) sprintf(pw_name, "%ld", (long) pw.pw_uid);
+       (void) snprintf(pw_name, sizeof(pw_name), "%ld", (long) pw.pw_uid);
        pw.pw_name = pw_name;
        sudo_user.pw = &pw;