ead: fix array overrun
authornbd <nbd@3c298f89-4303-0410-b956-a3cf2f4a3e73>
Tue, 6 Jan 2009 20:10:53 +0000 (20:10 +0000)
committernbd <nbd@3c298f89-4303-0410-b956-a3cf2f4a3e73>
Tue, 6 Jan 2009 20:10:53 +0000 (20:10 +0000)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@13902 3c298f89-4303-0410-b956-a3cf2f4a3e73

package/ead/src/ead.c

index 91f6fba..6a01ea4 100644 (file)
@@ -344,7 +344,7 @@ handle_set_username(struct ead_packet *pkt, int len, int *nstate)
 
        set_state(EAD_TYPE_SET_USERNAME); /* clear old state */
        strncpy(username, user->username, sizeof(username));
-       username[sizeof(username)] = 0;
+       username[sizeof(username) - 1] = 0;
 
        msg = &pktbuf->msg;
        msg->len = 0;