Stop a buffer overflow.

From: Kris Kennaway <kris@obsecurity.org>

bk: 3da522eehw2i0zpafm6mkPmkMktg8A

diff --git a/libntp/msyslog.c b/libntp/msyslog.c
index 98648814ae11d239323092fecaf087be8946f67e..52da608f4db3a5a29d75d430de89ff73cd5d9ad9 100644 (file)
--- a/libntp/msyslog.c
+++ b/libntp/msyslog.c
@@ -117,7 +117,7 @@ void msyslog(int level, const char *fmt, ...)
            *n++ = '\n';
        *n = '\0';
 
-       vsprintf(buf, nfmt, ap);
+       vsnprintf(buf, sizeof(buf), nfmt, ap);
 #if !defined(VMS) && !defined (SYS_VXWORKS)
        if (syslogit)
 #ifndef SYS_WINNT