Coverity SECURE_CODING - CID 12526 - src/action.cpp - in function: CompAction::ButtonBinding::fromString(...) - Using "sscanf" can cause a buffer overflow when done incorrectly. Use correct precision specifiers or do your own parsing.

[Product Strategy Coverity Bug Uploader]

This bug is exported from the Coverity Integration Manager on Canonical's servers. For information on how this is done please see this website: https://wiki.ubuntu.com/CanonicalProductStrategy/Coverity
CID: 12526
Checker: SECURE_CODING
Category: No category available
CWE definition: http://cwe.mitre.org/data/definitions/676.html
File: /tmp/buildd/compiz-0.9.9~daily13.01.14/src/action.cpp
Function: CompAction::ButtonBinding::fromString(const std::basic_string<char, std::char_traits<char>, std::allocator<char>>&)
Code snippet:
289 if (start != str.size () && str.compare (start, 6, "Button") == 0)
290 {
291 int buttonNum;
292
CID 12526 - SECURE_CODING
[VERY RISKY]. Using "sscanf" can cause a buffer overflow when done incorrectly. sscanf() assumes an arbitrarily large string, so callers must use correct precision specifiers or never use sscanf(). Use correct precision specifiers or do your own parsing.
293 if (sscanf (str.substr (start + 6).c_str (), "%d", &buttonNum) == 1)
294 {
295 mButton = buttonNum;
296 mModifiers = mods;
297
298 return true;

[Product Strategy Coverity Bug Uploader (coverity-uploader)]

Source file with Coverity annotations.