Off by one error in argv; prevents owning user from updating their

own machines.

diff --git a/server/qaccess.pc b/server/qaccess.pc
index 06c72ba7be9de7c3f27b178d143fbde176c37bd5..b2d827b02bd7825526c7253dbad9adf670ab65fc 100644 (file)
--- a/server/qaccess.pc
+++ b/server/qaccess.pc
@@ -486,7 +486,7 @@ int access_host(struct query *q, char *argv[], client *cl)
            {
              /* host owner also cannot change contact, status, address,
                 owner, or acomment */
-             if (strcmp(argv[6 + idx], strtrim(contact)) ||
+             if (strcmp(argv[6], strtrim(contact)) ||
                  (status != atoi(argv[8 + idx])) ||
                  strcmp(argv[10 + idx], strtrim(address)) ||
                  strcmp(argv[11 + idx], strtrim(mtype)) ||
@@ -495,7 +495,7 @@ int access_host(struct query *q, char *argv[], client *cl)
                return MR_PERM;
              /* Billing contact field didn't appear until version 6 */
              if (q->version >= 6)
-               if (strcmp(argv[8], strtrim(billing_contact)))
+               if (strcmp(argv[7], strtrim(billing_contact)))
                    return MR_PERM;
            }
          else