From 647e3dddeac404be15e5f45289c0e5c4dfdb9a02 Mon Sep 17 00:00:00 2001
From: Lekensteyn <lekensteyn@gmail.com>
Date: Wed, 29 Feb 2012 00:30:14 +0100
Subject: [PATCH] Buffer overflow by one byte

---
 bbswitch.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/bbswitch.c b/bbswitch.c
index c1984f9..d17c05b 100644
--- a/bbswitch.c
+++ b/bbswitch.c
@@ -74,9 +74,8 @@ int dis_before_suspend_disabled;
 static char *buffer_to_string(const char *buffer, size_t n, char *target) {
     int i;
     for (i=0; i<n; i++) {
-        sprintf(target + i * 5, "%02X,", buffer[i]);
+        snprintf(target + i * 5, 5 * (n - i), "%02X,", buffer[i]);
     }
-    target[n * 5] = '\0';
     return target;
 }