Fixed buffer overflow with too long newsheader

lib/msg.c

@@ -310,8 +310,8 @@ void Msg_Write(FILE *fp)
 	char	*Buf;
 	int	i;
 
-	Buf = calloc(2049, sizeof(char));
-	while ((fgets(Buf, 2048, fp)) != NULL) {
+	Buf = calloc(MAX_LINE_LENGTH +1, sizeof(char));
+	while ((fgets(Buf, MAX_LINE_LENGTH, fp)) != NULL) {
 
 		for (i = 0; i < strlen(Buf); i++) {
 			if (*(Buf + i) == '\0')

lib/msg.h

@@ -3,7 +3,11 @@
 #ifndef	_MSG_H
 #define	_MSG_H
 
-#define MAX_LINE_LENGTH	512
+/*
+ * Global maximum line length for all files that do something with
+ * message text.
+ */
+#define MAX_LINE_LENGTH	2048
 
 
 /*