[Bug 584] Fix potential buffer overrun

bk: 441fd8656iP7TxgEorEREGwPUqKOIQ

diff --git a/ntpd/refclock_chu.c b/ntpd/refclock_chu.c
index 6638803c095f7d4e073ac1b82157eb83df0ec61d..ccf00dd976fe0fc6ee2e75758d23bd4c49191bf7 100644 (file)
--- a/ntpd/refclock_chu.c
+++ b/ntpd/refclock_chu.c
@@ -1112,7 +1112,7 @@ chu_b(
                up->tstamp[up->ntstamp] = up->cstamp[i];
                L_SUB(&up->tstamp[up->ntstamp], &offset);
                L_ADD(&offset, &up->charstamp);
-               if (up->ntstamp < MAXSTAGE) 
+               if (up->ntstamp < MAXSTAGE - 1) 
                        up->ntstamp++;
        }
 }
@@ -1216,7 +1216,7 @@ chu_a(
                        up->tstamp[up->ntstamp] = up->cstamp[i];
                        L_SUB(&up->tstamp[up->ntstamp], &offset);
                        L_ADD(&offset, &up->charstamp);
-                       if (up->ntstamp < MAXSTAGE) 
+                       if (up->ntstamp < MAXSTAGE - 1) 
                                up->ntstamp++;
                }
                while (temp > up->prevsec) {