commit bf2e865dbd3709ef6a6f1be17c021f8ebcd9e3ab
from: Stefan Sperling <stsp@stsp.name>
via: Thomas Adam <thomas@xteddy.org>
date: Sat Apr 01 21:36:12 2023 UTC

fix an off-by-one in got_serve_parse_command() canonpath allocation

ok op@, tracey@

commit - f39a604656c539f738565ba0d7ce72b091868dcb
commit + bf2e865dbd3709ef6a6f1be17c021f8ebcd9e3ab
blob - 41a4b3a7a9164eb7f8dca9010be771a94eca4b8f
blob + 5e391cda4af389271a4144ffa39bd42c91322160
--- lib/serve.c
+++ lib/serve.c
@@ -128,12 +128,12 @@ got_serve_parse_command(char **command, char **repo_pa
 		goto done;
 	}
 	pathlen = strlen(abspath);
-	canonpath = malloc(pathlen);
+	canonpath = malloc(pathlen + 1);
 	if (canonpath == NULL) {
 		err = got_error_from_errno("malloc");
 		goto done;
 	}
-	err = got_canonpath(abspath, canonpath, pathlen);
+	err = got_canonpath(abspath, canonpath, pathlen + 1);
 	if (err)
 		goto done;