Bug in wtp_pack_sar_ack

Hi List,

in wtp_pack_sar_ack  we have following:

unsigned char cpsn;
sprintf(&cpsn, "%c", psn);

this does not work, because sprintf tries to add /0 for an end of the 
string, and cspn
is only one byte long.

simply doing:

unsigned char cpsn;
unsigned char damn[256];
sprintf(&cpsn, "%c", psn);

removes segfault, because now sprintf writes /0 to space reserved by 
damn. But of
course one wants a real fix.

aarno