Changed sprintf() calls to snprintf() calls.

diff --git a/uidlist.c b/uidlist.c
index 13f54d6..83eee45 100644 (file)
--- a/uidlist.c
+++ b/uidlist.c
@@ -126,12 +126,10 @@ static int is_in_group(gid_t gid)
                        char *gidbuf = new_array(char, ngroups*21+32);
                        if (!gidbuf)
                                out_of_memory("is_in_group");
                        char *gidbuf = new_array(char, ngroups*21+32);
                        if (!gidbuf)
                                out_of_memory("is_in_group");

-                       sprintf(gidbuf, "process has %d gid%s: ",
-                           ngroups, ngroups == 1? "" : "s");
-                       pos = strlen(gidbuf);
+                       pos = snprintf(gidbuf, 32, "process has %d gid%s: ",
+                                      ngroups, ngroups == 1? "" : "s");

                        for (n = 0; n < ngroups; n++) {
                        for (n = 0; n < ngroups; n++) {

-                               sprintf(gidbuf+pos, " %d", (int)gidset[n]);
-                               pos += strlen(gidbuf+pos);
+                               pos += snprintf(gidbuf+pos, 21, " %d", (int)gidset[n]);

                        }
                        rprintf(FINFO, "%s\n", gidbuf);
                        free(gidbuf);
                        }
                        rprintf(FINFO, "%s\n", gidbuf);
                        free(gidbuf);