QUIC QLOG: Fix use of sprintf

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23744)

diff --git a/ssl/quic/qlog.c b/ssl/quic/qlog.c
index 2cfa9af9d3053a8d7808b30a5ea82807a3514260..c14d53eece003c24684d69d15070df52d10eff10 100644 (file)
--- a/ssl/quic/qlog.c
+++ b/ssl/quic/qlog.c
@@ -130,7 +130,7 @@ QLOG *ossl_qlog_new_from_env(const QLOG_TRACE_INFO *info)
         filename[l++] = qlogdir_sep;
 
     for (i = 0; i < info->odcid.id_len; ++i)
-        l += sprintf(filename + l, "%02x", info->odcid.id[i]);
+        l += BIO_snprintf(filename + l, strl - l, "%02x", info->odcid.id[i]);
 
     l += BIO_snprintf(filename + l, strl - l, "_%s.sqlog",
                       info->is_server ? "server" : "client");