From: Gurusamy Sarathy <gsar@cpan.org>
Date: Fri, 4 Feb 2000 05:05:57 +0000 (+0000)
Subject: off-by-one in malloc.c (from Ilya Zakharevich)
X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?a=commitdiff_plain;h=b48f1ba55530934180c410ecc1fb73c4bc730b30;p=p5sagit%2Fp5-mst-13.2.git

off-by-one in malloc.c (from Ilya Zakharevich)

p4raw-id: //depot/perl@4974
---

diff --git a/malloc.c b/malloc.c
index 734ea06..5e85661 100644
--- a/malloc.c
+++ b/malloc.c
@@ -1748,9 +1748,9 @@ char *
 Perl_strdup(const char *s)
 {
     MEM_SIZE l = strlen(s);
-    char *s1 = (char *)Perl_malloc(l);
+    char *s1 = (char *)Perl_malloc(l+1);
 
-    Copy(s, s1, (MEM_SIZE)l, char);
+    Copy(s, s1, (MEM_SIZE)(l+1), char);
     return s1;
 }
 
@@ -1776,8 +1776,8 @@ Perl_putenv(char *a)
   else
       var = Perl_malloc(l + 1);
   Copy(a, var, l, char);
-  val++;
-  my_setenv(var,val);
+  var[l + 1] = 0;
+  my_setenv(var, val+1);
   if (var != buf)
       Perl_mfree(var);
   return 0;