Yeah, looks like GCC can't propogate the value limitation from the check to the sprintf, or has a bug that it doesn't notice that cmd is unsigned and can never get a minus sign.
Anyhow easy solution is add a char to the buffer. As discussed on IRC maybe also look at removing the initialisation, I can't remember why its there now, but seems useless. I don't have gcc7 to test yet. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/geany/geany/issues/1683#issuecomment-343351334