Auths: fix possible OOB write in SPA authenticator. Bug 3000

[exim.git] / src / src / auths / xtextdecode.c

diff --git a/src/src/auths/xtextdecode.c b/src/src/auths/xtextdecode.c
index c9622910af53308877d02f91f2bd90d9ed6aae06..746dfbdb4df2454046bbf1387c1ecec2b0c3587a 100644 (file)
--- a/src/src/auths/xtextdecode.c
+++ b/src/src/auths/xtextdecode.c
@@ -1,10 +1,9 @@
-/* $Cambridge: exim/src/src/auths/xtextdecode.c,v 1.3 2006/02/07 11:19:01 ph10 Exp $ */
-
 /*************************************************
 *     Exim - an Internet mail transport agent    *
 *************************************************/
 
-/* Copyright (c) University of Cambridge 1995 - 2006 */
+/* Copyright (c) The Exim Maintainers 2022 */
+/* Copyright (c) University of Cambridge 1995 - 2009 */
 /* See the file NOTICE for conditions of use and distribution. */
 
 #include "../exim.h"
@@ -35,7 +34,7 @@ int
 auth_xtextdecode(uschar *code, uschar **ptr)
 {
 register int x;
-uschar *result = store_get(Ustrlen(code) + 1);
+uschar * result = store_get(Ustrlen(code) + 1, code);
 *ptr = result;
 
 while ((x = (*code++)) != 0)