* Protected cmd_move() from buffer overrun (no longer crashes the server)

[citadel.git] / citadel / msgbase.c

diff --git a/citadel/msgbase.c b/citadel/msgbase.c
index 7c18b943cf5e789b154cd5d991fb2b53f54c9d69..5b37783ff42f840e6cc93d905d19b28e602d523e 100644 (file)
--- a/citadel/msgbase.c
+++ b/citadel/msgbase.c
@@ -2078,13 +2078,14 @@ void cmd_dele(char *delstr)
 void cmd_move(char *args)
 {
        long num;
-       char targ[32];
+       char targ[256];
        struct quickroom qtemp;
        int err;
        int is_copy = 0;
 
        num = extract_long(args, 0);
        extract(targ, args, 1);
+       targ[ROOMNAMELEN - 1] = 0;
        is_copy = extract_int(args, 2);
 
        getuser(&CC->usersupp, CC->curr_user);