Avoid sprintf
[openssl.git] / ssl / s3_pkt.c
index a3d656be407d4aaead90771ae16a17c45a0a917f..e3d02e6007deb54f1935152b98af0e747d2f3e95 100644 (file)
@@ -726,7 +726,7 @@ int ssl3_read_bytes(SSL *s, int type, unsigned char *buf, int len)
                {
                unsigned char *src = s->s3->handshake_fragment;
                unsigned char *dst = buf;
-               unsigned int j;
+               unsigned int k;
 
                n = 0;
                while ((len > 0) && (s->s3->handshake_fragment_len > 0))
@@ -736,8 +736,8 @@ int ssl3_read_bytes(SSL *s, int type, unsigned char *buf, int len)
                        n++;
                        }
                /* move any remaining fragment bytes: */
-               for (j = 0; j < s->s3->handshake_fragment_len; j++)
-                       s->s3->handshake_fragment[j] = *src++;
+               for (k = 0; k < s->s3->handshake_fragment_len; k++)
+                       s->s3->handshake_fragment[k] = *src++;
                return n;
        }
 
@@ -954,7 +954,7 @@ start:
                        s->rwstate=SSL_NOTHING;
                        s->s3->fatal_alert = alert_descr;
                        SSLerr(SSL_F_SSL3_READ_BYTES, SSL_AD_REASON_OFFSET + alert_descr);
-                       sprintf(tmp,"%d",alert_descr);
+                       BIO_snprintf(tmp,sizeof tmp,"%d",alert_descr);
                        ERR_add_error_data(2,"SSL alert number ",tmp);
                        s->shutdown|=SSL_RECEIVED_SHUTDOWN;
                        SSL_CTX_remove_session(s->ctx,s->session);