Replaced all uses of sprintf() with the safer snprintf(). It is just a

precaution to prevent mistakes to lead to buffer overflows.

1 files changed, 4 insertions, 1 deletions

diff --git a/lib/inet_ntop.c b/lib/inet_ntop.c
index 9dfccb3c6..eec06073b 100644
--- a/lib/inet_ntop.c
+++ b/lib/inet_ntop.c
@@ -24,6 +24,9 @@
 #include <string.h>
 #include <errno.h>
 
+#define _MPRINTF_REPLACE /* use our functions only */
+#include <curl/mprintf.h>
+
 #include "inet_ntop.h"
 
 #if defined(HAVE_INET_NTOA_R) && !defined(HAVE_INET_NTOA_R_DECL)
@@ -152,7 +155,7 @@ static const char *inet_ntop6 (const u_char *src, char *dst, size_t size)
       tp += strlen(tp);
       break;
     }
-    tp += sprintf (tp, "%lx", words[i]);
+    tp += snprintf(tp, 4, "%lx", words[i]);
   }
 
   /* Was it a trailing run of 0x00's?