Prevent buffer overflow, fixes #5896

diff --git a/src/dvr/dvr_cutpoints.c b/src/dvr/dvr_cutpoints.c
index c13ba29e868df1116c42c785c2f79026b28301d1..fd757c7467edbc9a196be5eb0f959da1f97fcc24 100644 (file)
--- a/src/dvr/dvr_cutpoints.c
+++ b/src/dvr/dvr_cutpoints.c
@@ -227,7 +227,7 @@ dvr_get_cutpoint_list (dvr_entry_t *de)
 
   /* Get base filename */
   // TODO: harcoded 3 for max extension
-  path = alloca(strlen(filename) + 3);
+  path = alloca(strlen(filename) + 4);
   strcpy(path, filename);
   sptr = strrchr(path, '.');
   if (!sptr) {
@@ -284,7 +284,8 @@ dvr_cutpoint_delete_files (const char *s)
   char *path, *dot;
   int i;
 
-  path = alloca(strlen(s) + 1);
+  // TODO: harcoded 3 for max extension
+  path = alloca(strlen(s) + 4);
 
   /* Check each cutlist extension */
   for (i = 0; i < ARRAY_SIZE(dvr_cutpoint_parsers); i++) {