# HG changeset patch # User Adam Chlipala # Date 1451157354 18000 # Node ID d163044ae4931aea9600089b84e9c1f673848cef # Parent 0420bfe96dda81fd939f6b659d0ec90faaf4da8d Fix off-by-one memory allocation error (part II) diff -r 0420bfe96dda -r d163044ae493 mail.c --- a/mail.c Sat Dec 26 14:15:12 2015 -0500 +++ b/mail.c Sat Dec 26 14:15:54 2015 -0500 @@ -93,7 +93,7 @@ address(ctx, s); if (h2->cc) { - uw_Basis_string all = uw_malloc(ctx, strlen(h2->cc) + 1 + strlen(s)); + uw_Basis_string all = uw_malloc(ctx, strlen(h2->cc) + 2 + strlen(s)); sprintf(all, "%s,%s", h2->cc, s); h2->cc = all; } else @@ -111,7 +111,7 @@ address(ctx, s); if (h2->bcc) { - uw_Basis_string all = uw_malloc(ctx, strlen(h2->bcc) + 1 + strlen(s)); + uw_Basis_string all = uw_malloc(ctx, strlen(h2->bcc) + 2 + strlen(s)); sprintf(all, "%s,%s", h2->bcc, s); h2->bcc = all; } else