From: Ilia Alshanetsky <iliaa@php.net>
Date: Thu, 28 Dec 2006 15:21:21 +0000 (+0000)
Subject: Added buffer length checks
X-Git-Tag: php-5.2.1RC2~43
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=794845234ee364a6ad7fcbdb953a9175d4ad25e9;p=php

Added buffer length checks
---

diff --git a/ext/pgsql/pgsql.c b/ext/pgsql/pgsql.c
index 08a9948562..b1187b9c2a 100644
--- a/ext/pgsql/pgsql.c
+++ b/ext/pgsql/pgsql.c
@@ -5485,7 +5485,7 @@ static inline int build_assignment_string(smart_str *querystr, HashTable *ht, co
 				smart_str_append_long(querystr, Z_LVAL_PP(val));
 				break;
 			case IS_DOUBLE:
-				smart_str_appendl(querystr, buf, sprintf(buf, "%f", Z_DVAL_PP(val)));
+				smart_str_appendl(querystr, buf, MIN(snprintf(buf, sizeof(buf), "%f", Z_DVAL_PP(val)), sizeof(buf)-1));
 				break;
 			default:
 				/* should not happen */