From 4233d266f5482a0a8e66a8c6dfe083aab97cae90 Mon Sep 17 00:00:00 2001
From: Mingjie Shen <shen497@purdue.edu>
Date: Fri, 21 Apr 2023 00:41:12 -0400
Subject: [PATCH] Fix unbounded writing of sscanf

'%s' may lead to buffer overflow if the width is not provided.
---
 src/external/tinyobj_loader_c.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/external/tinyobj_loader_c.h b/src/external/tinyobj_loader_c.h
index 6d34d25f7..1e53f3963 100644
--- a/src/external/tinyobj_loader_c.h
+++ b/src/external/tinyobj_loader_c.h
@@ -789,7 +789,7 @@ static int tinyobj_parse_and_index_mtl_file(tinyobj_material_t **materials_out,
 #ifdef _MSC_VER
       sscanf_s(token, "%s", namebuf, (unsigned)_countof(namebuf));
 #else
-      sscanf(token, "%s", namebuf);
+      sscanf(token, "%4095s", namebuf);
 #endif
       material.name = my_strdup(namebuf, (unsigned int) (line_end - token));