nsswitch: ensure the attrlist_t array is large enough for a NULL sentinel

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14754

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Mon Jul 12 15:11:42 UTC 2021 on sn-devel-184

diff --git a/nsswitch/winbind_nss_aix.c b/nsswitch/winbind_nss_aix.c
index 343809a4b34c52685f1034b81a84dc33c7dadef9..f1f00e92a761328eccb32baeeceadf55de08c814 100644 (file)
--- a/nsswitch/winbind_nss_aix.c
+++ b/nsswitch/winbind_nss_aix.c
@@ -833,7 +833,7 @@ static attrlist_t **wb_aix_attrlist(void)
        logit("method attrlist called\n");
 
        n = sizeof(attr_list) / sizeof(struct attr_types);
-       size = (n*sizeof(attrlist_t *));
+       size = ((n + 1) * sizeof(attrlist_t *));
 
        if ( (ret = malloc( size )) == NULL ) {
                errno = ENOMEM;