# HG changeset patch # User Timo Sirainen # Date 1196597145 -7200 # Node ID e744479186b6d63518b3721fe72733181d7ed9c9 # Parent 0ddc6511e9ffa82f205b3fbd1402be7582734b8b str_sanitize*() didn't properly limit string length. diff -r 0ddc6511e9ff -r e744479186b6 src/lib/str-sanitize.c --- a/src/lib/str-sanitize.c Sun Dec 02 13:39:25 2007 +0200 +++ b/src/lib/str-sanitize.c Sun Dec 02 14:05:45 2007 +0200 @@ -8,7 +8,7 @@ { const char *p; - for (p = src; *p != '\0'; p++) { + for (p = src; *p != '\0' && max_len > 0; p++, max_len--) { if (((unsigned char)*p & 0x7f) < 32) break; }