From d266bb2b4154d11c27252b56d86963aef4434750 Mon Sep 17 00:00:00 2001
From: "Emden R. Gansner" <[email protected]>
Date: Tue, 7 Jan 2014 10:45:36 -0500
Subject: [PATCH] Prevent possible buffer overflow in yyerror()
---
lib/cgraph/scan.l | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/lib/cgraph/scan.l b/lib/cgraph/scan.l
index 3efe1d5..212967c 100644
--- a/lib/cgraph/scan.l
+++ b/lib/cgraph/scan.l
@@ -201,7 +201,8 @@ void yyerror(char *str)
agxbput (&xb, InputFile);
agxbput (&xb, ": ");
}
- sprintf(buf," %s in line %d near '", str,line_num);
+ agxbput (&xb, str);
+ sprintf(buf," in line %d near '", line_num);
agxbput (&xb, buf);
agxbput (&xb, yytext);
agxbput (&xb,"'\n");