commit dc5eff9170fffae08454d56e5a71f9b6067fd79c
author Tim Peters <tim.peters@gmail.com> Sat Oct 27 06:53:00 2001 +0000
committer Tim Peters <tim.peters@gmail.com> Sat Oct 27 06:53:00 2001 +0000
tree 1b32cabb9f115ec2dc48b677f5c3c0a17f6d09c9
parent 62d48e1735db7acdbacbe7eec0131dd79f529a18

vgetargskeywords:  Prevent another potential sprintf buffer overrun.

Python/getargs.c

diff --git a/Python/getargs.c b/Python/getargs.c
index 8b6b306..658d285 100644
--- a/Python/getargs.c
+++ b/Python/getargs.c
@@ -1027,7 +1027,7 @@
 vgetargskeywords(PyObject *args, PyObject *keywords, char *format,
 	         char **kwlist, va_list *p_va)
 {
-	char msgbuf[256];
+	char msgbuf[512];
 	int levels[32];
 	char *fname, *message;
 	int min, max;
@@ -1138,7 +1138,7 @@
 	if (len < min || max < len) {
 		if (message == NULL) {
 			sprintf(msgbuf,
-				"%s%s takes %s %d argument%s (%d given)",
+				"%.200s%s takes %s %d argument%s (%d given)",
 				fname==NULL ? "function" : fname,
 				fname==NULL ? "" : "()",
 				min==max ? "exactly"