c->name_len already contains the '\0'

diff --git a/Zend/zend_constants.c b/Zend/zend_constants.c
index f81eaceb68d01bfbce210f41e86c7a78249f3602..eab7d3dfbd8d363f168f0881083b404f6016cbf7 100644 (file)
--- a/Zend/zend_constants.c
+++ b/Zend/zend_constants.c
@@ -244,10 +244,11 @@ ZEND_API int zend_register_constant(zend_constant *c TSRMLS_DC)
        printf("Registering constant for module %d\n", c->module_number);
 #endif
 
-       lowercase_name = do_alloca(c->name_len + 1);
+       /* keep in mind that c->name_len already contains the '\0' */
+       lowercase_name = do_alloca(c->name_len);
 
        if (!(c->flags & CONST_CS)) {
-               zend_str_tolower_copy(lowercase_name, c->name, c->name_len);
+               zend_str_tolower_copy(lowercase_name, c->name, c->name_len - 1);
        } else {
                memcpy(lowercase_name, c->name, c->name_len);
                lowercase_name[c->name_len] = '\0';