From aa1a72b31337d3fa30a90286eac8374c296691be Mon Sep 17 00:00:00 2001 From: dgp Date: Thu, 14 Jul 2011 02:39:03 +0000 Subject: 3366265 Allocate proper size buffer for TclConvertElement() to write to. --- generic/tclIndexObj.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/generic/tclIndexObj.c b/generic/tclIndexObj.c index 3e37f0f..7991533 100644 --- a/generic/tclIndexObj.c +++ b/generic/tclIndexObj.c @@ -541,7 +541,8 @@ Tcl_WrongNumArgs( len = TclScanElement(elementStr, elemLen, &flags); if (MAY_QUOTE_WORD && len != elemLen) { - char *quotedElementStr = TclStackAlloc(interp, (unsigned)len); + char *quotedElementStr = TclStackAlloc(interp, + (unsigned)len + 1); len = TclConvertElement(elementStr, elemLen, quotedElementStr, flags); @@ -596,7 +597,8 @@ Tcl_WrongNumArgs( len = TclScanElement(elementStr, elemLen, &flags); if (MAY_QUOTE_WORD && len != elemLen) { - char *quotedElementStr = TclStackAlloc(interp,(unsigned) len); + char *quotedElementStr = TclStackAlloc(interp, + (unsigned) len + 1); len = TclConvertElement(elementStr, elemLen, quotedElementStr, flags); -- cgit v0.12