From: Nick Mathewson <nickm@torproject.org>
Date: Fri, 15 Feb 2013 23:20:46 +0000 (-0500)
Subject: Fix a bug that roger found in the wide_circ_id code
X-Git-Tag: tor-0.2.4.11-alpha~21
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=59fc77e29b17840bf403d9ee9245846ad807b12d;p=thirdparty%2Ftor.git

Fix a bug that roger found in the wide_circ_id code
---

diff --git a/src/or/buffers.c b/src/or/buffers.c
index 33ea978daa..b54584fb4a 100644
--- a/src/or/buffers.c
+++ b/src/or/buffers.c
@@ -1056,7 +1056,7 @@ fetch_var_cell_from_buf(buf_t *buf, var_cell_t **out, int linkproto)
   *out = NULL;
   if (buf->datalen < header_len)
     return 0;
-  peek_from_buf(hdr, sizeof(hdr), buf);
+  peek_from_buf(hdr, header_len, buf);
 
   command = get_uint8(hdr + circ_id_len);
   if (!(cell_command_is_var_length(command, linkproto)))