Fix buffer overflow in print_number().

Refs #4865
2014-04-20 18:30:24 +02:00 · 2014-04-20 18:30:24 +02:00 · 08cdb3676d
parent 466cac1f52
commit 08cdb3676d
1 changed files with 1 additions and 1 deletions
--- a/third-party/cJSON/cJSON.c
+++ b/third-party/cJSON/cJSON.c
@ -127,7 +127,7 @@ static char *print_number(cJSON *item)
 	}
 	else
 	{
-		str=(char*)cJSON_malloc(64);	/* This is a nice tradeoff. */
+		str=(char*)cJSON_malloc(64 + (int)log10(d));	/* This is a nice tradeoff. */
 		if (str)
 		{
 			if (d != d)						strcpy(str, "0");