| 1 | gcc tells fortify-source that p refers to a buffer of length 1 which |
| 2 | triggers a trap |
| 3 | |
| 4 | |
| 5 | |
| 6 | char *cap_to_text(cap_t caps, ssize_t *length_p) |
| 7 | base += 2; |
| 8 | op = '='; |
| 9 | } |
| 10 | - p += sprintf(p, "%c%s%s%s", op, |
| 11 | + p += sprintf(&buf[p - buf], "%c%s%s%s", op, |
| 12 | (n & LIBCAP_EFF) ? "e" : "", |
| 13 | (n & LIBCAP_INH) ? "i" : "", |
| 14 | (n & LIBCAP_PER) ? "p" : ""); |