From 58363a66b44275c35e728b4d3cf6b66b91d4e2ac Mon Sep 17 00:00:00 2001 From: russell Date: Tue, 20 Dec 2005 20:23:20 +0000 Subject: check array bounds when parsing arguments to AGI (issue #5868) git-svn-id: http://svn.digium.com/svn/asterisk/branches/1.0@7558 f38db490-d61c-443f-a65b-d21fe96a405b --- res/res_agi.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/res/res_agi.c b/res/res_agi.c index 830a11278..8b2dc0c39 100644 --- a/res/res_agi.c +++ b/res/res_agi.c @@ -1649,9 +1649,8 @@ static int agi_exec_full(struct ast_channel *chan, void *data, int enhanced, int strncpy(buf, data, sizeof(buf) - 1); memset(&agi, 0, sizeof(agi)); - while ((stringp = strsep(&tmp, "|"))) { + while ((stringp = strsep(&tmp, "|")) && argc < MAX_ARGS - 1) argv[argc++] = stringp; - } argv[argc] = NULL; LOCAL_USER_ADD(u); -- cgit v1.2.1