util: Do not use vsprintf internally. Fixes #9286

1 files changed, 4 insertions, 3 deletions

diff --git a/src/lib/util/common_allocation.c b/src/lib/util/common_allocation.c
index f610430da..8a2b4261d 100644
--- a/src/lib/util/common_allocation.c
+++ b/src/lib/util/common_allocation.c
@@ -326,9 +326,10 @@ GNUNET_asprintf (char **buf,
   GNUNET_assert (ret >= 0);
   *buf = GNUNET_malloc (ret + 1);
   va_start (args, format);
-  ret = vsprintf (*buf,
-                  format,
-                  args);
+  ret = vsnprintf (*buf,
+                   ret + 1,
+                   format,
+                   args);
   va_end (args);
   return ret;
 }