diff options
author | Guido van Rossum <guido@python.org> | 1997-04-30 19:00:27 (GMT) |
---|---|---|
committer | Guido van Rossum <guido@python.org> | 1997-04-30 19:00:27 (GMT) |
commit | 15e33a4c42c9afacbe93eb4e3102a5e068e292eb (patch) | |
tree | 64f4cdc34c16f7058d8390490c7f08bb6d71de47 /Python/bltinmodule.c | |
parent | 04bc9d6e67016d0968d86744fd4379870f5a6c6e (diff) | |
download | cpython-15e33a4c42c9afacbe93eb4e3102a5e068e292eb.zip cpython-15e33a4c42c9afacbe93eb4e3102a5e068e292eb.tar.gz cpython-15e33a4c42c9afacbe93eb4e3102a5e068e292eb.tar.bz2 |
Avoid sprintf buffer overflow if more than 9999 arguments.
Diffstat (limited to 'Python/bltinmodule.c')
-rw-r--r-- | Python/bltinmodule.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/Python/bltinmodule.c b/Python/bltinmodule.c index 3fdaac9..fd8dc80 100644 --- a/Python/bltinmodule.c +++ b/Python/bltinmodule.c @@ -658,7 +658,7 @@ builtin_map(self, args) if (! (sqp->sqf = sqp->seq->ob_type->tp_as_sequence)) { static char errmsg[] = "argument %d to map() must be a sequence object"; - char errbuf[sizeof(errmsg) + 3]; + char errbuf[sizeof(errmsg) + 25]; sprintf(errbuf, errmsg, i+2); PyErr_SetString(PyExc_TypeError, errbuf); |