From 016d3b93945278bb01161198978d3f449ded8ba8 Mon Sep 17 00:00:00 2001 From: cubicdaiya Date: Wed, 5 Mar 2014 11:20:39 +0900 Subject: fix off-by-one error in attrsym The allocation size for null-terminated character is lacking. In actual, it is no problem in most case because codegen_palloc allocates more a memory size than required size. --- src/codegen.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'src/codegen.c') diff --git a/src/codegen.c b/src/codegen.c index f30b26b00..0b4d18bba 100644 --- a/src/codegen.c +++ b/src/codegen.c @@ -704,7 +704,11 @@ attrsym(codegen_scope *s, mrb_sym a) char *name2; name = mrb_sym2name_len(s->mrb, a, &len); - name2 = (char *)codegen_palloc(s, len+1); + name2 = (char *)codegen_palloc(s, + len + + 1 /* '=' */ + + 1 /* '\0' */ + ); memcpy(name2, name, len); name2[len] = '='; name2[len+1] = '\0'; -- cgit v1.2.3