DEVEL15-windows-heap-corruption-20070703

fix buffer over write error introduced since 1.5.20

(cherry picked from commit 1027ca87a78f02b62af67adfd85fdd4cd43fa65e)

diff --git a/src/WINNT/afsd/smb.c b/src/WINNT/afsd/smb.c
index 504b57b2de6c882e59f47559709eb773b9871dc2..ce4c2a4b7417a29093addd1e7299ffc13592a8e0 100644 (file)
--- a/src/WINNT/afsd/smb.c
+++ b/src/WINNT/afsd/smb.c
@@ -1813,7 +1813,7 @@ int smb_FindShare(smb_vc_t *vcp, smb_user_t *uidp, char *shareName,
         snprintf(pathstr, sizeof(pathstr)/sizeof(char),
                  "/" CM_PREFIX_VOL "%s", shareName);
         pathstr[sizeof(pathstr)/sizeof(char) - 1] = '\0';
-        len = strlen(pathstr);
+        len = strlen(pathstr) + 1;
 
         *pathNamep = malloc(len);
         if (*pathNamep) {