From 45ffc764edcfe202dfa208bf162dcc74ac5788ea Mon Sep 17 00:00:00 2001
From: jsteube <jens.steube@gmail.com>
Date: Sat, 12 Nov 2016 15:34:17 +0100
Subject: [PATCH] Fixed a bug in rule generator code when using the memory copy
 function

---
 docs/changes.txt | 5 +++--
 src/rp.c         | 2 +-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/docs/changes.txt b/docs/changes.txt
index 10ab89d59..1677d3280 100644
--- a/docs/changes.txt
+++ b/docs/changes.txt
@@ -18,8 +18,9 @@
 ## Bugs
 ##
 
-- Fixed a bug when cracking a large salted hashlist status view showed 0H/s but progress counter increased
-- Fixed a bug when loading custom charset from file
+- Fixed a bug in wordlist reject code when cracking a large salted hashlist
+- Fixed a bug in custom charset from file parsing code
+- Fixed a bug in rule generator code when using the memory copy function
 
 ##
 ## Algorithms
diff --git a/src/rp.c b/src/rp.c
index 6c430d6ac..c9480c9b8 100644
--- a/src/rp.c
+++ b/src/rp.c
@@ -234,7 +234,7 @@ int generate_random_rule (char rule_buf[RP_RULE_BUFSIZ], const u32 rp_gen_func_m
         p1 = get_random_num (0, sizeof (grp_pos));
         rule_buf[rule_pos++] = grp_pos[p1];
         p2 = get_random_num (1, sizeof (grp_pos));
-        rule_buf[rule_pos++] = grp_pos[p1];
+        rule_buf[rule_pos++] = grp_pos[p2];
         p3 = get_random_num (0, sizeof (grp_pos));
         rule_buf[rule_pos++] = grp_pos[p3];
         break;