From 29beb58ae99a61e611973fe8d9d246fb97d6587b Mon Sep 17 00:00:00 2001 From: Carsten Bock Date: Thu, 2 Feb 2017 08:22:05 +0100 Subject: [PATCH] ims_qos: Safety check on length of ports --- src/modules/ims_qos/rx_aar.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/modules/ims_qos/rx_aar.c b/src/modules/ims_qos/rx_aar.c index d4c299a3116..e87195fd1c8 100644 --- a/src/modules/ims_qos/rx_aar.c +++ b/src/modules/ims_qos/rx_aar.c @@ -1004,14 +1004,14 @@ int rx_send_aar_register(struct sip_msg *msg, AAASession* auth, saved_transactio raw_stream.s = 0; raw_stream.len = 0; - char c_port_from[5]; + char c_port_from[10]; str port_from; - port_from.len = sprintf(c_port_from, "%u", saved_t_data->via_port); + port_from.len = snprintf(c_port_from, 10, "%u", saved_t_data->via_port); port_from.s = c_port_from; - char c_port_to[5]; + char c_port_to[10]; str port_to; - port_to.len = sprintf(c_port_to, "%u", saved_t_data->recv_port); + port_to.len = snprintf(c_port_to, 10, "%u", saved_t_data->recv_port); port_to.s = c_port_to; str protocol;