Fix bug in strlcpy() that could cause reading too much data from the

source string.  Thanks to Jim Chow for reporting the bug and providing
the fix.

diff --git a/src/lib/string.c b/src/lib/string.c
index 8971fae21b3c4d6da492b2e54614dbb3e6f8e058..89fa1f05c01f130bce10948d493a10cac6d29063 100644 (file)
--- a/src/lib/string.c
+++ b/src/lib/string.c
@@ -339,7 +339,7 @@ strlcpy (char *dst, const char *src, size_t size)
     {
       size_t dst_len = size - 1;
       if (src_len < dst_len)
-        src_len = dst_len;
+        dst_len = src_len;
       memcpy (dst, src, dst_len);
       dst[dst_len] = '\0';
     }