fix overrun in expand()
authorRobert Manea <gotmor@gmail.com>
Sat, 25 Jul 2009 15:34:39 +0000 (17:34 +0200)
committerRobert Manea <gotmor@gmail.com>
Sat, 25 Jul 2009 15:34:39 +0000 (17:34 +0200)
uzbl.c

diff --git a/uzbl.c b/uzbl.c
index 95667c6..aa6556e 100644 (file)
--- a/uzbl.c
+++ b/uzbl.c
@@ -242,7 +242,7 @@ expand(char *s, guint recurse) {
     guint etype;
     char upto = ' ';
     char *end_simple_var = "^°!\"§$%&/()=?'`'+~*'#-.:,;@<>| \\{}[]¹²³¼½";
-    char str_end[2];
+    char str_end[3];
     char ret[4096];
     char *vend = NULL;
     GError *err = NULL;