[Core] scan-build: Use of zero allocated in switch_xml_str2utf8()

diff --git a/src/switch_xml.c b/src/switch_xml.c
index a48f9ab96d8d936beefff8919e288c1947120c20..cee1a4b833458f10b800547469fca01cde16dc8e 100644 (file)
--- a/src/switch_xml.c
+++ b/src/switch_xml.c
@@ -968,6 +968,9 @@ static char *switch_xml_str2utf8(char **s, switch_size_t *len)
        if (be == -1)
                return NULL;                    /* not UTF-16 */
 
+       if (*len <= 3)
+               return NULL;
+
        u = (char *) switch_must_malloc(max);
        for (sl = 2; sl < *len - 1; sl += 2) {
                c = (be) ? (((*s)[sl] & 0xFF) << 8) | ((*s)[sl + 1] & 0xFF)     /* UTF-16BE */