From: Philippe Wooding <philippe.wooding@networkradius.com>
Date: Fri, 7 Dec 2018 14:01:56 +0000 (+0100)
Subject: Bug fix in fr_value_box_bstrsnteal.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b604882b28c67b682bd342f77dc78b72ba682525;p=thirdparty%2Ffreeradius-server.git

Bug fix in fr_value_box_bstrsnteal.
'len' is not updated when talloc_realloc_size is called.
---

diff --git a/src/lib/util/value.c b/src/lib/util/value.c
index 6fa74561905..4baf8e86678 100644
--- a/src/lib/util/value.c
+++ b/src/lib/util/value.c
@@ -3073,7 +3073,7 @@ int fr_value_box_bstrsnteal(TALLOC_CTX *ctx, fr_value_box_t *dst, fr_dict_attr_t
 	dst->type = FR_TYPE_STRING;
 	dst->tainted = tainted;
 	dst->vb_strvalue = str;
-	dst->datum.length = len - 1;
+	dst->datum.length = inlen;
 	dst->enumv = enumv;
 	dst->next = NULL;
 
@@ -4649,4 +4649,3 @@ size_t fr_value_box_snprint(char *out, size_t outlen, fr_value_box_t const *data
 
 	return len;	/* Return the number of uint8s we would of written (for truncation detection) */
 }
-