Fix heap buffer overflow in URLAsset handling

libimobiledevice · Jul 1, 2024 · 26613f9 · 26613f9
1 parent 1d0821a
commit 26613f9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/restore.c b/src/restore.c
@@ -1235,7 +1235,7 @@ static size_t _curl_header_callback(char* buffer, size_t size, size_t nitems, vo
 			key[i] = '\0';
 			i++;
 			while (i < len && buffer[i] == ' ' || buffer[i] == '\t') i++;
-			val = malloc(len-i);
+			val = malloc(len-i+1);
 			strncpy(val, buffer+i, len-i);
 			val[len-i] = '\0';
 			break;