Comment 3 for bug 493284

Revision history for this message
Niall Creech (sevenmachines-deactivatedaccount) wrote :

buffer overflow in C3DGraphicChessboard::load() call to sprintf

- char texture_filename[50];
- sprintf(texture_filename,PC_DATA_TEXTURE_SKYBOX,i),
+ char texture_filename[1024];
+ snprintf(texture_filename,1023,PC_DATA_TEXTURE_SKYBOX,i),