fix buffer overflow and format string vulnerabilities

server/commands/client_commands.c

@@ -45,7 +45,7 @@ test_func_func (Client * c, int argc, char **argv)
 
 	for (i = 0; i < argc; i++) {
 		snprintf (str, sizeof(str), "%s:  %i -> %s\n", __FUNCTION__, i, argv[i]);
-		report (RPT_INFO, str);
+		report (RPT_INFO, "%s", str);
 		sock_send_string (c->sock, str);
 	}
 	return 0;

server/parse.c

@@ -154,7 +154,7 @@ parse_all_client_messages2 ()
 
 
 				argc++;
-			} while (*p);
+			} while (*p && i < MAX_ARGUMENTS - 1);
 
 			/*debug(RPT_DEBUG, "exiting string scan...");*/