Fix cyrusimap#587

Off by one error in common.c, CVE-2019-19906. Thanks to Stephan Zeisberg for reporting
aiobofh · Mar 4, 2020 · b0bf594 · b0bf594
1 parent 0d7aeb1
commit b0bf594
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/common.c b/lib/common.c
@@ -190,7 +190,7 @@ int _sasl_add_string(char **out, size_t *alloclen,
 
   if (add==NULL) add = "(null)";
 
-  addlen=strlen(add); /* only compute once */
+  addlen=strlen(add)+1; /* only compute once */
   if (_buf_alloc(out, alloclen, (*outlen)+addlen)!=SASL_OK)
     return SASL_NOMEM;