Use snprintf instead of sprintf

python-pillow · Jun 30, 2021 · 518ee37 · 518ee37
1 parent 5f4504b
commit 518ee37
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/libImaging/Convert.c b/src/libImaging/Convert.c
@@ -1595,7 +1595,7 @@ convert(
         return (Imaging)ImagingError_ValueError("conversion not supported");
 #else
         static char buf[100];
-        sprintf(buf, "conversion from %.10s to %.10s not supported", imIn->mode, mode);
+        snprintf(buf, 100, "conversion from %.10s to %.10s not supported", imIn->mode, mode);
         return (Imaging)ImagingError_ValueError(buf);
 #endif
     }
@@ -1645,8 +1645,9 @@ ImagingConvertTransparent(Imaging imIn, const char *mode, int r, int g, int b) {
 #else
     {
         static char buf[100];
-        sprintf(
+        snprintf(
             buf,
+            100,
             "conversion from %.10s to %.10s not supported in convert_transparent",
             imIn->mode,
             mode);