commit e7cc3b383e5e9190aa7784554c605a3a661ebe2b
author Nick Hilliard <nick@inex.ie> Tue Mar 17 22:14:25 2009 +0000
committer Paul Jakma <paul@quagga.net> Tue Jul 21 11:34:27 2009 +0100
tree 3f7b254d2e47805d4a39c43bd0c6f459e512732a
parent 67b9467f6cad5097a3e4c6e49348be4d6c17a5bb

[bgpd] Small buffer overrun in bgp_clear_node_queue_init

* bgp_route.c: (bgp_clear_node_queue_init) fix buffer
  overrun.

bgpd/bgp_route.c

diff --git a/bgpd/bgp_route.c b/bgpd/bgp_route.c
index 8dafd18..d08cb1e 100644
--- a/bgpd/bgp_route.c
+++ b/bgpd/bgp_route.c
@@ -2726,8 +2726,7 @@
 static void
 bgp_clear_node_queue_init (struct peer *peer)
 {
-#define CLEAR_QUEUE_NAME_LEN 26 /* "clear 2001:123:123:123::1" */
-  char wname[CLEAR_QUEUE_NAME_LEN];
+  char wname[sizeof("clear xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx"];
   
   snprintf (wname, CLEAR_QUEUE_NAME_LEN, "clear %s", peer->host);
 #undef CLEAR_QUEUE_NAME_LEN