fix off-by-one error in attrsym

The allocation size for null-terminated character is lacking.
In actual, it is no problem in most case
because codegen_palloc allocates more a memory size than required size.

1 files changed, 5 insertions, 1 deletions

diff --git a/src/codegen.c b/src/codegen.c
index f30b26b00..0b4d18bba 100644
--- a/src/codegen.c
+++ b/src/codegen.c
@@ -704,7 +704,11 @@ attrsym(codegen_scope *s, mrb_sym a)
   char *name2;
 
   name = mrb_sym2name_len(s->mrb, a, &len);
-  name2 = (char *)codegen_palloc(s, len+1);
+  name2 = (char *)codegen_palloc(s,
+                                 len
+                                 + 1 /* '=' */
+                                 + 1 /* '\0' */
+                                 );
   memcpy(name2, name, len);
   name2[len] = '=';
   name2[len+1] = '\0';