From: Tilghman Lesher <tilghman@meg.abyt.es>
Date: Fri, 2 Oct 2009 00:08:21 +0000 (+0000)
Subject: One more off-by-one in trunk
X-Git-Tag: 11.0.0-beta1~4090
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=bd7ca4b764c604b1e09de691a89687b444dc32e8;p=thirdparty%2Fasterisk.git

One more off-by-one in trunk


git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@221781 65c4cc65-6c06-0410-ace0-fbb531ad65f3
---

diff --git a/main/say.c b/main/say.c
index 5e3ae96d9b..7f79273084 100644
--- a/main/say.c
+++ b/main/say.c
@@ -4212,7 +4212,7 @@ int ast_say_date_with_format_th(struct ast_channel *chan, time_t t, const char *
 			case '\'':
 				/* Literal name of a sound file */
 				sndoffset=0;
-				for (sndoffset=0 ; (format[++offset] != '\'') && (sndoffset < 256) ; sndoffset++)
+				for (sndoffset=0 ; (format[++offset] != '\'') && (sndoffset < sizeof(sndfile) - 1) ; sndoffset++)
 					sndfile[sndoffset] = format[offset];
 				sndfile[sndoffset] = '\0';
 				res = wait_file(chan, ints, sndfile, lang);