From 63d2357afe31546f6fa3f28b8c297df6add5448d Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Tue, 3 Jul 2007 15:12:45 +0000
Subject: [PATCH] DEVEL15-windows-heap-corruption-20070703

fix buffer over write error introduced since 1.5.20


(cherry picked from commit 1027ca87a78f02b62af67adfd85fdd4cd43fa65e)
---
 src/WINNT/afsd/smb.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/WINNT/afsd/smb.c b/src/WINNT/afsd/smb.c
index 504b57b2d..ce4c2a4b7 100644
--- a/src/WINNT/afsd/smb.c
+++ b/src/WINNT/afsd/smb.c
@@ -1813,7 +1813,7 @@ int smb_FindShare(smb_vc_t *vcp, smb_user_t *uidp, char *shareName,
         snprintf(pathstr, sizeof(pathstr)/sizeof(char),
                  "/" CM_PREFIX_VOL "%s", shareName);
         pathstr[sizeof(pathstr)/sizeof(char) - 1] = '\0';
-        len = strlen(pathstr);
+        len = strlen(pathstr) + 1;
 
         *pathNamep = malloc(len);
         if (*pathNamep) {
-- 
2.39.5