Ensure that escape_display_name() can't overrun a buffer.

[mmh] / sbr / mts.c

diff --git a/sbr/mts.c b/sbr/mts.c
index 556d7400cecc82299a88d251e46b2a757f103fe6..b529d15f7ffd3c3f88f2bdd427832ded64be57c4 100644 (file)
--- a/sbr/mts.c
+++ b/sbr/mts.c
@@ -397,7 +397,7 @@ getuserinfo (void)
 
     fullname[sizeof(fullname) - 1] = '\0';
 
-    escape_display_name(fullname);
+    escape_display_name(fullname, sizeof(fullname));
 
     localmbox[0] = '\0';