fix more strncat usage (one must specify available room, not total dest buffer size)

2019-03-12 22:04:23 +01:00
parent c147b434a2
commit 98ff923d61
2 changed files with 10 additions and 10 deletions
--- a/client/cmdhf15.c
+++ b/client/cmdhf15.c
@@ -796,7 +796,7 @@ int CmdHF15Restore(const char *Cmd) {
                    case '2':
                    case 'o':
                        strncpy(newCmdPrefix, " ", sizeof(newCmdPrefix) - 1);
-                        strncat(newCmdPrefix, param, sizeof(newCmdPrefix) - 1);
+                        strncat(newCmdPrefix, param, sizeof(newCmdPrefix) - strlen(newCmdPrefix) - 1);
                        break;
                    default:
                        PrintAndLogEx(WARNING, "Unknown parameter '%s'", param);