replace sprintf with snprintf

Author: lonvia

middle-pgsql.cpp

@@ -152,14 +152,14 @@ pg_result_t middle_query_pgsql_t::exec_prepared(char const *stmt,
                                                 osmid_t osm_id) const
 {
     char buffer[64];
-    sprintf(buffer, "%" PRIdOSMID, osm_id);
+    snprintf(buffer, sizeof(buffer), "%" PRIdOSMID, osm_id);
     return exec_prepared(stmt, buffer);
 }
 
 pg_result_t middle_pgsql_t::exec_prepared(char const *stmt, osmid_t osm_id) const
 {
     char buffer[64];
-    sprintf(buffer, "%" PRIdOSMID, osm_id);
+    snprintf(buffer, sizeof(buffer), "%" PRIdOSMID, osm_id);
     auto bptr = const_cast<char const *>(buffer);
     return pgsql_execPrepared(m_query_conn, stmt, 1, &bptr, PGRES_TUPLES_OK);
 }

output-gazetteer.cpp

@@ -23,7 +23,7 @@ void output_gazetteer_t::delete_unused_classes(char const *osm_type,
     }
 
     char id[64];
-    sprintf(id, "%" PRIdOSMID, osm_id);
+    snprintf(id, sizeof(id), "%" PRIdOSMID, osm_id);
     char const *params[2] = {osm_type, id};
 
     auto res = pgsql_execPrepared(m_conn, "get_classes", 2, params,
@@ -53,7 +53,7 @@ void output_gazetteer_t::delete_unused_classes(char const *osm_type,
 void output_gazetteer_t::delete_place(char const *osm_type, osmid_t osm_id)
 {
     char id[64];
-    sprintf(id, "%" PRIdOSMID, osm_id);
+    snprintf(id, sizeof(id), "%" PRIdOSMID, osm_id);
     char const *params[2] = {osm_type, id};
 
     pgsql_execPrepared(m_conn, "delete_place", 2, params, PGRES_COMMAND_OK);