Bug in wtp_pack_sar_ack

[Aarno Syvänen]

Hi List,

in wtp_pack_sar_ack we have following:

unsigned char cpsn;
sprintf(&cpsn, "%c", psn);

this does not work, because sprintf tries to add /0 for an end of the string, and cspn
is only one byte long.

simply doing:

unsigned char cpsn;
unsigned char damn[256];
sprintf(&cpsn, "%c", psn);

removes segfault, because now sprintf writes /0 to space reserved by damn. But of
course one wants a real fix.

aarno