COMP: Fix unsafe usage of sprintf

This usage of sprintf can result it buffer overflow. Use the bounded snprintf. Change-Id: Ibe58c95ac878685344b16ae3c7ce57d15456bd4d
InsightSoftwareConsortium · Jan 8, 2015 · 3e6a661 · 3e6a661
1 parent 6e3a97c
commit 3e6a661
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/Modules/IO/ImageBase/include/itkImageSeriesWriter.hxx b/Modules/IO/ImageBase/include/itkImageSeriesWriter.hxx
@@ -28,6 +28,11 @@
 #include "itkArray.h"
 #include "vnl/algo/vnl_determinant.h"
 #include <cstdio>
+
+#if defined(_MSC_VER)
+#define snprintf _snprintf
+#endif // _MSC_VER
+
 namespace itk
 {
 //---------------------------------------------------------
@@ -155,7 +160,7 @@ ImageSeriesWriter< TInputImage, TOutputImage >
 
   for ( unsigned int slice = 0; slice < numberOfFiles; slice++ )
     {
-    sprintf (fileName, m_SeriesFormat.c_str(), fileNumber);
+    snprintf (fileName, IOCommon::ITK_MAXPATHLEN + 1, m_SeriesFormat.c_str(), fileNumber);
     m_FileNames.push_back(fileName);
     fileNumber += this->m_IncrementIndex;
     }