shithub: libmujs

Info  •  Files  •  Log  •  Branches

Fix bug 697137: off by one in string length calculation.

We were not allocating space for the terminating zero byte.

--- a/jsfunction.c

+++ b/jsfunction.c

@@ -61,7 +61,7 @@

 		n += strlen(F->name);

 		for (i = 0; i < F->numparams; ++i)

 			n += strlen(F->vartab[i]) + 1;

-		s = js_malloc(J, n);

+		s = js_malloc(J, n + 1);

 		strcpy(s, "function ");

 		strcat(s, F->name);

 		strcat(s, "(");