shithub: riscv

Info  •  Files  •  Log  •  Branches

acid: fix cvtitoa buffer overflow

--- a/sys/src/cmd/acid/builtin.c

+++ b/sys/src/cmd/acid/builtin.c

@@ -754,7 +754,7 @@

 		expr(av[1], &res);

 		if(res.type != TSTRING)

 			error("itoa(number [, fmt]): fmt type");

-		if(acidfmt(res.string->string, fmt, sizeof(buf)))

+		if(acidfmt(res.string->string, fmt, sizeof(fmt)))

 			error("itoa(number [, fmt]): malformed fmt");

 	}

-- 

⑨