From a9a852477adc1808a79a3822f9f5d556b95415e4 Mon Sep 17 00:00:00 2001
From: Michael Jerris <mike@jerris.com>
Date: Wed, 30 Apr 2014 13:25:22 -0400
Subject: [PATCH] fix read beyond buffer length error

---
 src/mod/applications/mod_voicemail_ivr/menu.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/mod/applications/mod_voicemail_ivr/menu.c b/src/mod/applications/mod_voicemail_ivr/menu.c
index 54393da349..560068cead 100644
--- a/src/mod/applications/mod_voicemail_ivr/menu.c
+++ b/src/mod/applications/mod_voicemail_ivr/menu.c
@@ -736,7 +736,7 @@ char *vmivr_menu_get_input_set(switch_core_session_t *session, vmivr_profile_t *
 		switch_event_add_header(menu.phrase_params, SWITCH_STACK_BOTTOM, "IVR-Retry-Left", "%d", retry);
 
 		/* Find the last entry and append this one to it */
-		for (i=0; menu.dtmfa[i] && i < 16; i++){
+		for (i=0; i < 16 && menu.dtmfa[i]; i++){
 		}
 		menu.dtmfa[i] = (char *) input_mask;