Fix issue detected by static analysis tool
authorJihoon Kim <jihoon48.kim@samsung.com>
Mon, 17 Jul 2023 11:02:21 +0000 (20:02 +0900)
committerJihoon Kim <jihoon48.kim@samsung.com>
Thu, 21 Dec 2023 23:47:25 +0000 (08:47 +0900)
Because sprintf assumes an arbitrarily long string,
callers must be careful not to overflow the actual space of the destination.

Change-Id: I4a3e641459d1da0f54db7eeb109447868906e394
Signed-off-by: Jihoon Kim <jihoon48.kim@samsung.com>
src/compose/parser.c

index 5545a33..e1c903d 100644 (file)
@@ -664,7 +664,7 @@ rhs:
             scanner_warn(s, "right-hand side string is too long; skipping line");
             goto skip;
         }
-        strcpy(production.string, val.string.str);
+        strncpy(production.string, val.string.str, sizeof(production.string)-1);
         production.has_string = true;
         goto rhs;
     case TOK_IDENT: