opt: limit scanf string length to 255

This commit is contained in:
David Delarosa 2025-10-20 13:50:43 +03:00 committed by DreamMaoMao
parent c086e7513a
commit cc2bd9d599

View file

@ -1812,7 +1812,7 @@ void parse_option(Config *config, char *key, char *value) {
arg_value[256] = "0\0", arg_value2[256] = "0\0",
arg_value3[256] = "0\0", arg_value4[256] = "0\0",
arg_value5[256] = "0\0";
if (sscanf(value, "%[^,],%[^,],%[^,],%[^,],%[^,],%[^,],%[^,],%[^\n]",
if (sscanf(value, "%255[^,],%255[^,],%255[^,],%255[^,],%255[^,],%255[^,],%255[^,],%255[^\n]",
mod_str, keysym_str, func_name, arg_value, arg_value2,
arg_value3, arg_value4, arg_value5) < 3) {
fprintf(stderr, "Error: Invalid bind format: %s\n", value);