FIX: Fixed buffer overflow in RL_Word_String()

As reported by @meshpoint in PR: rebolsource#4
Oldes · Mar 13, 2019 · cdfe7a8 · cdfe7a8
1 parent db7b4cf
commit cdfe7a8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/core/a-lib.c b/src/core/a-lib.c
@@ -756,7 +756,7 @@ RL_API REBYTE *RL_Word_String(u32 word)
 {
 	REBYTE *s1, *s2;
 	s1 = Get_Sym_Name(word);
-	s2 = OS_MAKE(strlen(cs_cast(s1)));
+	s2 = OS_MAKE(strlen(cs_cast(s1)) + 1);
 	strcpy(s_cast(s2), cs_cast(s1));
 	return s2;
 }