Fix out-of-bounds memory accesses.

And remove a variable-length-array usage.
This commit is contained in:
Jon Siwek 2013-09-13 15:05:17 -05:00
parent 5a992879a0
commit 3d81432a1e
2 changed files with 5 additions and 3 deletions

View file

@ -2045,7 +2045,7 @@ int Manager::CopyValue(char *data, const int startpos, const Value* val)
case IPv6:
length = sizeof(val->val.addr_val.in.in6);
memcpy(data + startpos,
(const char*) &(val->val.subnet_val.prefix.in.in4), length);
(const char*) &(val->val.subnet_val.prefix.in.in6), length);
break;
default: