Explorar o código

* Fix buffer overflow when trying to null-terminate chan->floodwho

svn: 3826
Bryan Drewery %!s(int64=18) %!d(string=hai) anos
pai
achega
899e69510c
Modificáronse 1 ficheiros con 1 adicións e 1 borrados
  1. 1 1
      src/mod/irc.mod/chan.c

+ 1 - 1
src/mod/irc.mod/chan.c

@@ -484,7 +484,7 @@ static bool detect_chan_flood(char *floodnick, char *floodhost, char *from,
   }
   if (rfc_casecmp(chan->floodwho[which], p)) {	/* new */
     strncpy(chan->floodwho[which], p, sizeof(chan->floodwho[which]));
-    chan->floodwho[which][sizeof(chan->floodwho[which])] = 0;
+    chan->floodwho[which][sizeof(chan->floodwho[which]) - 1] = 0;
     chan->floodtime[which] = now;
     chan->floodnum[which] = 1;
     return 0;