ce7d11059587 — Chris Cannam tip 3 months ago
Use snprintf
1 files changed, 3 insertions(+), 2 deletions(-)

M ffi/impl-bqaudiostream.cpp
M ffi/impl-bqaudiostream.cpp +3 -2
@@ 57,8 57,9 @@ extern "C" {
                 return strdup(what);
             } else {
                 // 4 == space, open paren, close paren, NUL
-                char *err = (char *)malloc(strlen(what) + more.size() + 4);
-                sprintf(err, "%s (%s)", what, more.c_str());
+                size_t sz = strlen(what) + more.size() + 4;
+                char *err = (char *)malloc(sz);
+                snprintf(err, sz, "%s (%s)", what, more.c_str());
                 return err;
             }
         } else {