From: Ruben De Smet <ruben.de.smet@rubdos.be>
Date: Mon, 5 Jun 2023 13:18:46 +0000 (+0200)
Subject: dvr_rec: Fix a buffer overflow in filename generation
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=003fd92707531bdf7ad1753ab028db8748ac5ab8;p=thirdparty%2Ftvheadend.git

dvr_rec: Fix a buffer overflow in filename generation

Fixes https://tvheadend.org/issues/6272

Co-authored-by: Dave Pickles
---

diff --git a/src/dvr/dvr_rec.c b/src/dvr/dvr_rec.c
index d8b95a1ba..eec60585d 100644
--- a/src/dvr/dvr_rec.c
+++ b/src/dvr/dvr_rec.c
@@ -1088,7 +1088,7 @@ pvr_generate_filename(dvr_entry_t *de, const streaming_start_t *ss)
       j--;
     s[j] = '\0';
     snprintf(path + l, sizeof(path) - l, "%s", s);
-    snprintf(path + l + j, sizeof(path) - l + j, "/%s", filename);
+    snprintf(path + l + j, sizeof(path) - (l + j), "/%s", filename);
   }
 
   /* Substitute time formatters */