Coverity SECURE_CODING - CID 12528 - src/plugin.cpp - in function: CompPlugin::load(const char *) - [VERY RISKY]. Using "sprintf" can cause a buffer overflow when done incorrectly. Because sprintf() assumes an arbitrarily long string, callers must be careful not to overflow the actual space of the destination. Use snprintf() instead, or correct precision specifiers.

This bug is exported from the Coverity Integration Manager on Canonical's servers. For information on how this is done please see this website: https://wiki.ubuntu.com/CanonicalProductStrategy/Coverity
CID: 12528
Checker: SECURE_CODING
Category: No category available
CWE definition: http://cwe.mitre.org/data/definitions/676.html
File: /tmp/buildd/compiz-0.9.9~daily13.01.14/src/plugin.cpp
Function: CompPlugin::load(const char *)
Code snippet:
466
467 if (char* home = getenv ("HOME"))
468 {
469 boost::scoped_array<char> plugindir(new char [strlen (home) + strlen (HOME_PLUGINDIR) + 3]);
CID 12528 - SECURE_CODING
[VERY RISKY]. Using "sprintf" can cause a buffer overflow when done incorrectly. Because sprintf() assumes an arbitrarily long string, callers must be careful not to overflow the actual space of the destination. Use snprintf() instead, or correct precision specifiers.
470 sprintf (plugindir.get(), "%s/%s", home, HOME_PLUGINDIR);
471
472 if (loaderLoadPlugin (p.get(), plugindir.get(), name))
473 return p.release();
474 }
475