Fix buffer overflow in a2p

schacon · Apr 24, 1997 · ece629c · ece629c
1 parent ace5de9
commit ece629c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/x2p/a2py.c b/x2p/a2py.c
@@ -1297,10 +1297,10 @@ int prevargs;
 	numargs = fixrargs(name,ops[arg+3].ival,numargs);
     }
     else {
-	char tmpbuf[128];
-
+	char *tmpbuf = safemalloc(strlen(name) + (sizeof(prevargs) * 3) + 5);
 	sprintf(tmpbuf,"%s:%d",name,prevargs);
 	str = hfetch(curarghash,tmpbuf);
+	safefree(tmpbuf);
 	if (str && strEQ(str->str_ptr,"*")) {
 	    if (type == OVAR || type == OSTAR) {
 		ops[arg].ival &= ~255;