From 4449905ea5acd4d05043c7a227166198d243de21 Mon Sep 17 00:00:00 2001
From: Steven Dake <sdake@redhat.com>
Date: Tue, 6 Mar 2012 08:33:57 +0100
Subject: [PATCH] Use safer snprintf rather then sprintf in scp_send()

Signed-off-by: Steven Dake <sdake@redhat.com>
---
 src/scp.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/scp.c b/src/scp.c
index c0f77cc..6401dac 100644
--- a/src/scp.c
+++ b/src/scp.c
@@ -796,8 +796,8 @@ scp_send(LIBSSH2_SESSION * session, const char *path, int mode,
             return NULL;
         }
 
-        sprintf((char *)session->scpSend_command, "scp -%st ",
-                (mtime || atime)?"p":"");
+        snprintf((char *)session->scpSend_command, session->scpSend_command_len,
+                 "scp -%st ", (mtime || atime)?"p":"");
 
         cmd_len = strlen((char *)session->scpSend_command);