git-blame: Fix overrun in fake_working_tree_commit()

diff --git a/builtin-blame.c b/builtin-blame.c
index 60ec5354f11c61c49829d41e8c07d22573f16bc7..bc86bda6c474a1e7ca0789b2c83e6201f370cb5f 100644 (file)
--- a/builtin-blame.c
+++ b/builtin-blame.c
@@ -2041,7 +2041,7 @@ static struct commit *fake_working_tree_commit(const char *path, const char *con
 
        commit->buffer = xmalloc(400);
        ident = fmt_ident("Not Committed Yet", "not.committed.yet", NULL, 0);
-       sprintf(commit->buffer,
+       snprintf(commit->buffer, 400,
                "tree 0000000000000000000000000000000000000000\n"
                "parent %s\n"
                "author %s\n"