From 7b17e3015bc4f6cd37c9ebb5457d06a8a4c7e291 Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Tue, 21 Apr 2015 21:50:43 -0400
Subject: [PATCH] YFS Coverity 11475

Change-Id: I3b6cde99859979e5db866c3f707f194144251ee1
---
 kdc/kstash.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kdc/kstash.c b/kdc/kstash.c
index c389ff326..54d662838 100644
--- a/kdc/kstash.c
+++ b/kdc/kstash.c
@@ -64,7 +64,7 @@ int num_args = sizeof(args) / sizeof(args[0]);
 int
 main(int argc, char **argv)
 {
-    char buf[1024];
+    char buf[1024+1];
     krb5_error_code ret;
     int aret;
 
@@ -117,7 +117,7 @@ main(int argc, char **argv)
 	} else {
 	    if(master_key_fd != -1) {
 		ssize_t n;
-		n = read(master_key_fd, buf, sizeof(buf));
+		n = read(master_key_fd, buf, sizeof(buf)-1);
 		if(n <= 0)
 		    krb5_err(context, 1, errno, "failed to read passphrase");
 		buf[n] = '\0';