tree ac6431f2133b6e074fe5e7ea27c19fec479b3b59
parent c8ff39dae97724b590ed7de23ebdd2d0e694966d
author Matt Spinler <spinler@us.ibm.com> 1702398095 -0600
committer Matt Spinler <spinler@us.ibm.com> 1702586706 +0000

PEL: Change asprintf call to snprintf

A static analysis security scanner (HCL AppScan SAST) flagged the
asprintf call as a vulnerability because the format string is passed in.

While really it isn't an issue because the format string is always
hardcoded in the calling function and isn't input by a user, this commit
changes it anyway to get it off the list.

Use snprintf instead.  While it still takes a passed in format string, a
hardcoded maximum length is used so that the scanner shouldn't flag it
as a possible buffer overrun.

Signed-off-by: Matt Spinler <spinler@us.ibm.com>
Change-Id: Ife309b63470536940ac88c27d13fe73716096326