diff options
| author | dgp <dgp@users.sourceforge.net> | 2011-07-13 17:53:58 (GMT) |
|---|---|---|
| committer | dgp <dgp@users.sourceforge.net> | 2011-07-13 17:53:58 (GMT) |
| commit | e52188bb947ad440f55db9df3820f490d62dda97 (patch) | |
| tree | f1620db0ed8edabd97357b78ee3e6acb96377b72 /generic | |
| parent | f68e0956811e95ac8846d64a4bfa0113de5c3650 (diff) | |
| download | tcl-e52188bb947ad440f55db9df3820f490d62dda97.zip tcl-e52188bb947ad440f55db9df3820f490d62dda97.tar.gz tcl-e52188bb947ad440f55db9df3820f490d62dda97.tar.bz2 | |
3366265 Buffer allocated one byte too small caused overrun.
Diffstat (limited to 'generic')
| -rw-r--r-- | generic/tclProc.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/generic/tclProc.c b/generic/tclProc.c index be35bab..abfd152 100644 --- a/generic/tclProc.c +++ b/generic/tclProc.c @@ -1155,7 +1155,7 @@ TclObjInterpProc(clientData, interp, objc, objv) len = Tcl_ScanCountedElement(procName, nameLen, &flags); if (len != nameLen) { - char *procName1 = ckalloc((unsigned) len); + char *procName1 = ckalloc((unsigned) len + 1); len = Tcl_ConvertCountedElement(procName, nameLen, procName1, flags); Tcl_AppendToObj(objResult, procName1, len); ckfree(procName1); |