(rmt_lseek__,rmt_ioctl__): Bugfix. The

conversion buffer was not null terminated. Fix provided
by Leland Lucius <llucius@tiny.net>

diff --git a/src/rtapelib.c b/src/rtapelib.c
index dcf2477c70e521ceafb27ccd2e11185af1ce240a..1e044295fad810b3c327d0264c917eef2ba59b2a 100644 (file)
--- a/src/rtapelib.c
+++ b/src/rtapelib.c
@@ -605,6 +605,7 @@ rmt_lseek__ (int handle, off_t offset, int whence)
   uintmax_t u = offset < 0 ? - (uintmax_t) offset : (uintmax_t) offset;
   char *p = operand_buffer + sizeof operand_buffer;
 
+  *--p = 0;
   do
     *--p = '0' + (int) (u % 10);
   while ((u /= 10) != 0);
@@ -648,6 +649,7 @@ rmt_ioctl__ (int handle, int operation, char *argument)
                       : (uintmax_t) ((struct mtop *) argument)->mt_count);
        char *p = operand_buffer + sizeof operand_buffer;
        
+        *--p = 0;
        do
          *--p = '0' + (int) (u % 10);
        while ((u /= 10) != 0);