Add field width to scanf pattern to protect against huge inputs

Ultimately this needs to be replaced with something more serious, but for now,
240 characters ought to be enough for anybody.

1 files changed, 3 insertions, 3 deletions

diff --git a/src/jalv.c b/src/jalv.c
index 24a1008..52856d3 100644
--- a/src/jalv.c
+++ b/src/jalv.c
@@ -778,9 +778,9 @@ jalv_update(Jalv* jalv)
 static bool
 jalv_apply_control_arg(Jalv* jalv, const char* s)
 {
-  char  sym[256];
-  float val = 0.0f;
-  if (sscanf(s, "%[^=]=%f", sym, &val) != 2) {
+  char  sym[256] = {'\0'};
+  float val      = 0.0f;
+  if (sscanf(s, "%240[^=]=%f", sym, &val) != 2) {
     jalv_log(JALV_LOG_WARNING, "Ignoring invalid value `%s'\n", s);
     return false;
   }