Made sure we don't call strncpy with a negative length.

diff --git a/chanserv/chancmds/channelcomment.c b/chanserv/chancmds/channelcomment.c
index 3ef89b62362cd2b69797beb5af2bf864ec7d55dc..92d505e9a2daf45cde2bcd7eb33a96cc93192b9f 100644 (file)
--- a/chanserv/chancmds/channelcomment.c
+++ b/chanserv/chancmds/channelcomment.c
@@ -56,7 +56,7 @@ int csc_dochannelcomment(void *source, int cargc, char **cargv) {
        } else {
          bufpos=0;
        }
-       strncpy(buf+bufpos, cargv[1]+1, 250-bufpos);
+       strncpy(buf+bufpos, cargv[1]+1, 280-bufpos);
       } else {
        strncpy(buf, cargv[1], 250);
       }

diff --git a/chanserv/usercmds/usercomment.c b/chanserv/usercmds/usercomment.c
index 0b44d9e43a0469a9fc05dd98d732169ba49cc055..a9acffd2585a6f3f9994601af47ce22e3ced7e54 100644 (file)
--- a/chanserv/usercmds/usercomment.c
+++ b/chanserv/usercmds/usercomment.c
@@ -46,7 +46,7 @@ int csu_dousercomment(void *source, int cargc, char **cargv) {
        } else {
          bufpos=0;
        }
-       strncpy(buf+bufpos, cargv[1]+1, 250-bufpos);
+       strncpy(buf+bufpos, cargv[1]+1, 280-bufpos);
       } else {
        strncpy(buf, cargv[1], 250);
       }