MFH: Added buffer length checks

diff --git a/ext/pgsql/pgsql.c b/ext/pgsql/pgsql.c
index a831530b3d631974bff769a6fc562197b1d7cc42..cd2f7df1897ae529f7762b98b3f4b989bd6a8584 100644 (file)
--- a/ext/pgsql/pgsql.c
+++ b/ext/pgsql/pgsql.c
@@ -4285,7 +4285,7 @@ static inline int build_assignment_string(smart_str *querystr, HashTable *ht, co
                                smart_str_append_long(querystr, Z_LVAL_PP(val));
                                break;
                        case IS_DOUBLE:
-                               smart_str_appendl(querystr, buf, sprintf(buf, "%f", Z_DVAL_PP(val)));
+                               smart_str_appendl(querystr, buf, MIN(snprintf(buf, sizeof(buf), "%f", Z_DVAL_PP(val)), sizeof(buf)-1));
                                break;
                        default:
                                /* should not happen */