replace strlen() call with strnlen() and MAX_SPA_ENCODED_MSG_SIZE bound

diff --git a/lib/fko_encode.c b/lib/fko_encode.c
index 2adb42f..5a28b6e 100644 (file)
--- a/lib/fko_encode.c
+++ b/lib/fko_encode.c
@@ -41,9 +41,12 @@
 static int
 append_b64(char* tbuf, char *str)
 {
-    int   len = strlen(str);
+    int   len = strnlen(str, MAX_SPA_ENCODED_MSG_SIZE);
     char *bs;
 
+    if(len >= MAX_SPA_ENCODED_MSG_SIZE)
+        return(FKO_ERROR_INVALID_DATA);
+
     bs = malloc(((len/3)*4)+8);
     if(bs == NULL)
         return(FKO_ERROR_MEMORY_ALLOCATION);