Merge "[SDL_Tizen] Fix security issue" into tizen

diff --git a/src/audio/qsa/SDL_qsa_audio.c b/src/audio/qsa/SDL_qsa_audio.c
index 1899ca6..d96a62b 100644 (file)
--- a/src/audio/qsa/SDL_qsa_audio.c
+++ b/src/audio/qsa/SDL_qsa_audio.c
@@ -621,11 +621,11 @@ QSA_DetectDevices(void)
                     snd_pcm_t *handle;
 
                     /* Add device number to device name */
-                    sprintf(qsa_playback_device[qsa_playback_devices].name +
-                            SDL_strlen(qsa_playback_device
-                                       [qsa_playback_devices].name), " d%d",
-                            devices);
-
+                    SDL_snprintf(qsa_playback_device[qsa_playback_devices].name 
+                      + SDL_strlen(qsa_playback_device[qsa_playback_devices].name),
+                    sizeof (qsa_playback_device[qsa_playback_devices].name
+                      + SDL_strlen(qsa_playback_device[qsa_playback_devices].name)),
+                    " d%d", devices);
                     /* Store associated card number id */
                     qsa_playback_device[qsa_playback_devices].cardno = it;
 
@@ -679,10 +679,9 @@ QSA_DetectDevices(void)
                     snd_pcm_t *handle;
 
                     /* Add device number to device name */
-                    sprintf(qsa_capture_device[qsa_capture_devices].name +
-                            SDL_strlen(qsa_capture_device
-                                       [qsa_capture_devices].name), " d%d",
-                            devices);
+                    SDL_snprintf(qsa_capture_device[qsa_capture_devices].name + SDL_strlen(qsa_capture_device[qsa_capture_devices].name),
+                        sizeof(qsa_capture_device[qsa_capture_devices].name + SDL_strlen(qsa_capture_device[qsa_capture_devices].name)),
+                        " d%d", devices);
 
                     /* Store associated card number id */
                     qsa_capture_device[qsa_capture_devices].cardno = it;