sasl_secret_t ends in a char [1] size. This means the extra character is implicit...
commit5c53d63348882b17f16bed0cc41f1489dcd6cf66
authorJeremy Allison <jra@samba.org>
Tue, 3 May 2011 20:53:30 +0000 (3 13:53 -0700)
committerJeremy Allison <jra@samba.org>
Wed, 4 May 2011 19:12:14 +0000 (4 12:12 -0700)
tree3c9f5c24da6a42c5f2f66cfc57b4ceb5cd4f182f
parentcabd9e70e2f3ce3f617975a4d005d79121313b5f
sasl_secret_t ends in a char [1] size. This means the extra character is implicit in the safe_strcpy. When changing to strlcpy ensure we allocate an extra char for it. This fixes a bug where secret->len+1 used with safe_strcpy could actually write into secret->len+2.
source4/auth/gensec/cyrus_sasl.c