From: Harlan Stenn <stenn@ntp.org>
Date: Tue, 21 Mar 2006 10:41:41 +0000 (-0500)
Subject: [Bug 584] Fix potential buffer overrun
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b661b3b101dd2aa64ae60d47adc92cfa176fbb45;p=thirdparty%2Fntp.git

[Bug 584] Fix potential buffer overrun

bk: 441fd8656iP7TxgEorEREGwPUqKOIQ
---

diff --git a/ntpd/refclock_chu.c b/ntpd/refclock_chu.c
index 6638803c09..ccf00dd976 100644
--- a/ntpd/refclock_chu.c
+++ b/ntpd/refclock_chu.c
@@ -1112,7 +1112,7 @@ chu_b(
 		up->tstamp[up->ntstamp] = up->cstamp[i];
 		L_SUB(&up->tstamp[up->ntstamp], &offset);
 		L_ADD(&offset, &up->charstamp);
-		if (up->ntstamp < MAXSTAGE) 
+		if (up->ntstamp < MAXSTAGE - 1) 
 			up->ntstamp++;
 	}
 }
@@ -1216,7 +1216,7 @@ chu_a(
 			up->tstamp[up->ntstamp] = up->cstamp[i];
 			L_SUB(&up->tstamp[up->ntstamp], &offset);
 			L_ADD(&offset, &up->charstamp);
-			if (up->ntstamp < MAXSTAGE) 
+			if (up->ntstamp < MAXSTAGE - 1) 
 				up->ntstamp++;
 		}
 		while (temp > up->prevsec) {