Fix a couple uses of sprintf. The second one could actually cause an overflow

of a stack buffer.  It's not a security issue though, it only depends on your
configuration.


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.4@108469 65c4cc65-6c06-0410-ace0-fbb531ad65f3
This commit is contained in:
Russell Bryant
2008-03-13 20:26:28 +00:00
parent 9ff74a2b0a
commit 269d0aa7e8

View File

@@ -818,9 +818,9 @@ static void findmeexec(struct fm_args *tpargs)
}
if (!strcmp(tpargs->context, ""))
sprintf(dialarg, "%s", number);
snprintf(dialarg, sizeof(dialarg), "%s", number);
else
sprintf(dialarg, "%s@%s", number, tpargs->context);
snprintf(dialarg, sizeof(dialarg), "%s@%s", number, tpargs->context);
tmpuser = ast_calloc(1, sizeof(*tmpuser));
if (!tmpuser) {