Fix buffer overflow

diff --git a/src/dvr/dvr_cutpoints.c b/src/dvr/dvr_cutpoints.c
index fd757c7467edbc9a196be5eb0f959da1f97fcc24..e3101deb18fa4f0dbd309fb3451a850184234432 100644 (file)
--- a/src/dvr/dvr_cutpoints.c
+++ b/src/dvr/dvr_cutpoints.c
@@ -226,7 +226,7 @@ dvr_get_cutpoint_list (dvr_entry_t *de)
   TAILQ_INIT(cuts);
 
   /* Get base filename */
-  // TODO: harcoded 3 for max extension
+  // TODO: harcoded 3 for max extension plus 1 for termination
   path = alloca(strlen(filename) + 4);
   strcpy(path, filename);
   sptr = strrchr(path, '.');
@@ -284,8 +284,8 @@ dvr_cutpoint_delete_files (const char *s)
   char *path, *dot;
   int i;
 
-  // TODO: harcoded 3 for max extension
-  path = alloca(strlen(s) + 4);
+  // TODO: harcoded 3 for max extension, plus 1 for . and one for termination
+  path = alloca(strlen(s) + 5);
 
   /* Check each cutlist extension */
   for (i = 0; i < ARRAY_SIZE(dvr_cutpoint_parsers); i++) {