(turn): Buffer passed to getele() was one too small. Deity could

overrun it by entering a message of maximum size.

diff --git a/src/lib/commands/turn.c b/src/lib/commands/turn.c
index 1c35ef531efac93113a51bfc0a42c05b1a4b3e2b..041d1f97be44f30ef65d5af04965cf5bccc68c81 100644 (file)
--- a/src/lib/commands/turn.c
+++ b/src/lib/commands/turn.c
@@ -49,7 +49,7 @@ turn(void)
     FILE *fptr;
     struct telstr tgm;
     char *p;
-    char buf[MAXTELSIZE];
+    char buf[MAXTELSIZE + 1];
     char *msgfilepath;
 
     p = getstarg(player->argp[1], "on, off or motd? ", buf);