bugfix: trailing ":" of tag was lost while parsing legacy syslog messages

    without timestamp - thanks to Anders Blomdell for providing a patch!

2 files changed, 5 insertions, 1 deletions

diff --git a/ChangeLog b/ChangeLog
index 172f3f31..4f2f70a4 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -10,6 +10,8 @@ Version 2.0.2 STABLE (rgerhards), 2008-02-??
 - bugfix: errno could be changed during mark processing, leading to
   invalid error messages when processing inputs. Thank to varmojfekoj for
   pointing out this problem.
+- bugfix: trailing ":" of tag was lost while parsing legacy syslog messages
+  without timestamp - thanks to Anders Blomdell for providing a patch!
 ---------------------------------------------------------------------------
 Version 2.0.1 STABLE (rgerhards), 2008-01-24
 - fixed a bug in integer conversion - but this function was never called,
diff --git a/syslogd.c b/syslogd.c
index ad740524..57fffbfe 100644
--- a/syslogd.c
+++ b/syslogd.c
@@ -3113,7 +3113,9 @@ static int parseLegacySyslogMsg(msg_t *pMsg, int flags)
 			 */
 			if(*p2parse == ':') {
 				bTAGCharDetected = 1;
-				++p2parse;
+				/* We will move hostname to tag, so preserve ':' (otherwise we 
+				 * will needlessly change the message format) */
+				*pWork++ = *p2parse++; 
 			} else if(*p2parse == ' ')
 				++p2parse;
 			*pWork = '\0';