From: Vsevolod Stakhov <vsevolod@highsecure.ru>
Date: Fri, 26 Apr 2019 15:16:54 +0000 (+0100)
Subject: [Fix] Avoid buffer overflow when printing long lua strings
X-Git-Tag: 1.9.3~66
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d48c89a83f6104699e07bbda42c9850b8a090043;p=thirdparty%2Frspamd.git

[Fix] Avoid buffer overflow when printing long lua strings
---

diff --git a/src/lua/lua_logger.c b/src/lua/lua_logger.c
index 67b70eaad0..9d25fce6a1 100644
--- a/src/lua/lua_logger.c
+++ b/src/lua/lua_logger.c
@@ -413,11 +413,11 @@ lua_logger_out_userdata (lua_State *L, gint pos, gchar *outbuf, gsize len,
 	}
 
 	if (converted_to_str) {
-		r = rspamd_snprintf (outbuf, len + 1, "%s", str);
+		r = rspamd_snprintf (outbuf, len, "%s", str);
 	}
 	else {
 		/* Print raw pointer */
-		r = rspamd_snprintf (outbuf, len + 1, "%s(%p)", str, lua_touserdata (L, pos));
+		r = rspamd_snprintf (outbuf, len, "%s(%p)", str, lua_touserdata (L, pos));
 	}
 
 	lua_settop (L, top);