[Debian bug 474298 484352] Fixed off-by-1 memory allocation error.

Allocate one more byte to allow for double terminating NUL bytes.
BuGlessRB · Mar 2, 2022 · 990f9d4 · 990f9d4
1 parent 570ef09
commit 990f9d4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/mailfold.c b/src/mailfold.c
@@ -205,7 +205,7 @@ int writefolder(boxname,linkfolder,source,len,ignwerr,dolock)
   if(linkfolder)		    /* any additional directories specified? */
    { size_t blen;
      if(blen=Tmnate-linkfolder)		       /* copy the names into safety */
-	Tmnate=(linkfolder=tmemmove(malloc(blen),linkfolder,blen))+blen;
+	Tmnate=(linkfolder=tmemmove(malloc(blen+1),linkfolder,blen))+blen;
      else
 	linkfolder=0;
    }