From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Date: Wed, 5 Jul 2017 16:38:29 +0000 (-0400)
Subject: Use strncmp instead of memcmp so we don't overrun the buffer pointed to by ptr
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=22233440e3989c3bfbe90b6cc7febdd1907ba040;p=thirdparty%2Ffreeradius-server.git

Use strncmp instead of memcmp so we don't overrun the buffer pointed to by ptr
---

diff --git a/src/main/cf_file.c b/src/main/cf_file.c
index 79081b4b0c0..ee27b6c3e49 100644
--- a/src/main/cf_file.c
+++ b/src/main/cf_file.c
@@ -251,7 +251,7 @@ char const *cf_expand_variables(char const *cf, int *lineno,
 				ERROR("%s[%d]: Reference \"%s\" type is invalid", cf, *lineno, input);
 				return NULL;
 			}
-		} else if (memcmp(ptr, "$ENV{", 5) == 0) {
+		} else if (strncmp(ptr, "$ENV{", 5) == 0) {
 			char *env;
 
 			ptr += 5;