]> granicus.if.org Git - procps-ng/commitdiff
tload: Use snprintf() instead of sprintf().
authorQualys Security Advisory <qsa@qualys.com>
Thu, 1 Jan 1970 00:00:00 +0000 (00:00 +0000)
committerCraig Small <csmall@enc.com.au>
Fri, 18 May 2018 21:32:21 +0000 (07:32 +1000)
tload.c

diff --git a/tload.c b/tload.c
index 92aae3e4a131ea7d4d89f3a76acee3550dab882d..29e6a8ffbfc35888104171222a30d62e309f9cea 100644 (file)
--- a/tload.c
+++ b/tload.c
@@ -205,8 +205,8 @@ int main(int argc, char **argv)
                        for (row = nrows - 2; row >= 0; --row)
                                *(screen + row * ncols + col) = ' ';
                }
-               i = sprintf(screen, " %.2f, %.2f, %.2f", av[0], av[1], av[2]);
-               if (i > 0)
+               i = snprintf(screen, scr_size, " %.2f, %.2f, %.2f", av[0], av[1], av[2]);
+               if (i > 0 && i < scr_size)
                        screen[i] = ' ';
 
                if (write(fd, "\033[H", 3) < 0)