X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=src%2Fsubnet_parse.c;h=c919b59a8eef028710498f77052ebb894c6ba350;hp=1d54c1344746031bcef3e339b5354256de04c5f3;hb=abb24e9d71b3edb9cacf4c04361cc0dfd4e6a061;hpb=45a30f71572fab8e73c456737b7506b2cf12be25

diff --git a/src/subnet_parse.c b/src/subnet_parse.c
index 1d54c134..c919b59a 100644
--- a/src/subnet_parse.c
+++ b/src/subnet_parse.c
@@ -186,6 +186,7 @@ int subnet_compare(const subnet_t *a, const subnet_t *b) {
 bool str2net(subnet_t *subnet, const char *subnetstr) {
 	char str[1024];
 	strncpy(str, subnetstr, sizeof(str));
+	str[sizeof str - 1] = 0;
 	int consumed;
 
 	int weight = DEFAULT_WEIGHT;
@@ -255,7 +256,7 @@ bool str2net(subnet_t *subnet, const char *subnetstr) {
 		for (int i = 0; i < 4; i++)
 			if (x[i] > 255)
 				return false;
-		sprintf(last_colon, ":%02x%02x:%02x%02x", x[0], x[1], x[2], x[3]);
+		snprintf(last_colon, sizeof str - (last_colon - str), ":%02x%02x:%02x%02x", x[0], x[1], x[2], x[3]);
 	}
 
 	char* double_colon = strstr(str, "::");