Buffer was one element too small, missing room for a null terminator.…

… Reported by nhmall. See issue #295.
Bill-Gray · Jun 5, 2023 · 0a4e1e9 · 0a4e1e9
1 parent f8cacee
commit 0a4e1e9
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pdcurses/getch.c b/pdcurses/getch.c
@@ -278,8 +278,8 @@ static int _paste(void)
         return -1;
 
 #ifdef PDC_WIDE
-    wpaste = (wchar_t *)malloc(len * sizeof(wchar_t));
-    len = (long)PDC_mbstowcs(wpaste, paste, len);
+    wpaste = (wchar_t *)malloc((len + 1) * sizeof(wchar_t));
+    len = (long)PDC_mbstowcs(wpaste, paste, len + 1);
 #endif
     newmax = len + SP->c_ungind;
     if (newmax > SP->c_ungmax)