alsactl: fix potential buffer overwrite

The 'call to sprintf' operation on line 413 requires 21 bytes
but the destination is only 16 bytes.

Fixes: https://github.com/alsa-project/alsa-utils/pull/247
Signed-off-by: Mingjie Shen <shen497@purdue.edu>
Signed-off-by: Jaroslav Kysela <perex@perex.cz>

diff --git a/alsactl/alsactl.c b/alsactl/alsactl.c
index a854c0bdc16f331e11b3ec15eb04ba0271dd84d4..8ad991a0f36bc1cfebcee54fd2507b83f43f377b 100644 (file)
--- a/alsactl/alsactl.c
+++ b/alsactl/alsactl.c
@@ -242,7 +242,7 @@ int main(int argc, char *argv[])
        char *cfgfile = SYS_ASOUNDRC;
        char *initfile = DATADIR "/init/00main";
        char *pidfile = SYS_PIDFILE;
-       char *cardname, ncardname[16];
+       char *cardname, ncardname[21];
        char *cmd;
        char *const *extra_args;
        const char *const *tmp;