From e50408ee0ba522053a21639188e747ff566b119b Mon Sep 17 00:00:00 2001 From: Adam Sutton Date: Sun, 3 Feb 2013 20:05:36 +0000 Subject: [PATCH] Fix #1588 - epg: forgot to check string bounds for epggrab channel name --- src/epggrab/channel.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/src/epggrab/channel.c b/src/epggrab/channel.c index db73b288..3fe0381c 100644 --- a/src/epggrab/channel.c +++ b/src/epggrab/channel.c @@ -185,7 +185,7 @@ epggrab_channel_t *epggrab_channel_find htsmsg_t *epggrab_channel_list ( void ) { - char name[100]; + char name[500]; epggrab_module_t *mod; epggrab_channel_t *ec; htsmsg_t *e, *m; @@ -198,9 +198,10 @@ htsmsg_t *epggrab_channel_list ( void ) htsmsg_add_str(e, "id", ec->id); if (ec->name) htsmsg_add_str(e, "name", ec->name); - sprintf(name, "%s|%s", mod->id, ec->id); + snprintf(name, sizeof(name), "%s|%s", mod->id, ec->id); htsmsg_add_str(e, "mod-id", name); - sprintf(name, "%s: %s (%s)", mod->name, ec->name, ec->id); + snprintf(name, sizeof(name), "%s: %s (%s)", + mod->name, ec->name, ec->id); htsmsg_add_str(e, "mod-name", name); htsmsg_add_msg(m, NULL, e); }