From 6df21d4015dcc4564e223062ec41252700fc6590 Mon Sep 17 00:00:00 2001 From: Gerald Pfeifer Date: Sat, 11 Feb 2017 23:13:00 +0100 Subject: [PATCH] propsys: Use snprintf in PROPVAR_ConvertFILETIME. Signed-off-by: Gerald Pfeifer Signed-off-by: Alexandre Julliard --- dlls/propsys/propvar.c | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/dlls/propsys/propvar.c b/dlls/propsys/propvar.c index 002555e4891..3fee67ad276 100644 --- a/dlls/propsys/propvar.c +++ b/dlls/propsys/propvar.c @@ -50,13 +50,15 @@ static HRESULT PROPVAR_ConvertFILETIME(PROPVARIANT *ppropvarDest, static const char format[] = "%04d/%02d/%02d:%02d:%02d:%02d.%03d"; ppropvarDest->u.pszVal = HeapAlloc(GetProcessHeap(), 0, - lstrlenA(format) + 1); + sizeof(format)); if (!ppropvarDest->u.pszVal) return E_OUTOFMEMORY; - sprintf(ppropvarDest->u.pszVal, format, time.wYear, time.wMonth, - time.wDay, time.wHour, time.wMinute, - time.wSecond, time.wMilliseconds); + snprintf( ppropvarDest->u.pszVal, sizeof(format), + format, + time.wYear, time.wMonth, time.wDay, + time.wHour, time.wMinute, time.wSecond, + time.wMilliseconds ); return S_OK; }