replace sprintf with snprintf for secure-coding

[platform/core/api/system-settings.git] / src / system_setting_platform.c

diff --git a/src/system_setting_platform.c b/src/system_setting_platform.c
index 3a0652e..135c2b1 100644 (file)
--- a/src/system_setting_platform.c
+++ b/src/system_setting_platform.c
@@ -37,6 +37,8 @@
 
 #include <fontconfig/fontconfig.h>
 
+#include <alarm.h>
+
 #include <pkgmgr-info.h>
 
 #include <system_settings.h>
@@ -1284,11 +1286,11 @@ int system_setting_set_locale_timezone(system_settings_key_e key, system_setting
        vconf_value = (char *)value;
 
        char tz_path[1024];
-       sprintf( tz_path, "/usr/share/zoneinfo/%s", vconf_value);
+       snprintf(tz_path, 1024, "/usr/share/zoneinfo/%s", vconf_value);
 
        int is_load = _is_file_accessible(tz_path);
        if (is_load == 0) {
-               int ret = alarmmgr_set_timezone(tz_path);
+               alarmmgr_set_timezone(tz_path);
 
                if (system_setting_vconf_set_value_string(VCONFKEY_SETAPPL_TIMEZONE_ID, vconf_value)) {
                        return SYSTEM_SETTINGS_ERROR_IO_ERROR;