diff options
| author | Simon <simon@hardwired.org.uk> | 2011-02-04 11:42:11 (GMT) |
|---|---|---|
| committer | Simon <simon@hardwired.org.uk> | 2011-02-04 11:42:11 (GMT) |
| commit | dd5ca12223db92a9a9731e6dfd31708af724025c (patch) | |
| tree | aab3edb0b636e6a57b04fc7df0b2a4555d211713 /src | |
| parent | 9469a3b46a80970fc1d2a11df8c8692de90b6c00 (diff) | |
| download | powder-dd5ca12223db92a9a9731e6dfd31708af724025c.zip powder-dd5ca12223db92a9a9731e6dfd31708af724025c.tar.gz | |
We don't want any buffer overflow, especially when reading file and user input
Diffstat (limited to 'src')
| -rw-r--r-- | src/main.c | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -2637,7 +2637,7 @@ int process_command(pixel *vid_buf,char *console,char *console_error) { //sprintf(console_error, "%s", console); if(console && strcmp(console, "")!=0 && strncmp(console, " ", 1)!=0) { - sscanf(console,"%s %s %s %s", console2, console3, console4, console5);//why didn't i know about this function?! + sscanf(console,"%14s %14s %14s %14s", console2, console3, console4, console5);//why didn't i know about this function?! if(strcmp(console2, "quit")==0) { return -1; @@ -2678,7 +2678,7 @@ int process_command(pixel *vid_buf,char *console,char *console_error) { x = 0; y = 0; sscanf(tokens,"x%d,y%d",&x,&y); - sscanf(tokens,"%s,%s",xcoord,ycoord); + sscanf(tokens,"%9s,%9s",xcoord,ycoord); x += nx; y += ny; sprintf(xcoord,"%d",x); |
