Guard memset in camessage.c to prevent wild memory overrun if mismatch

between payload and data size.

src/ca/nciu.h

@@ -41,7 +41,7 @@
 #   include "shareLib.h"
 #endif
 
-#define CA_MINOR_PROTOCOL_REVISION 12
+#define CA_MINOR_PROTOCOL_REVISION 13
 #include "caProto.h"
 
 #include "cacIO.h"

src/rsrv/camessage.c

@@ -605,7 +605,7 @@ static void read_reply ( void *pArg, struct dbAddr *paddr,
                 payload_size = data_size;
                 cas_set_header_count(pClient, item_count);
             }
-            else
+            else if (payload_size > data_size)
                 memset(
                     (char *) pPayload + data_size, 0, payload_size - data_size);
         }