Marcus Webster reported and fixed this read-one-byte-too-many problem...

diff --git a/lib/formdata.c b/lib/formdata.c
index e0c487dc67bddbeae8b95e855d21175709e2db75..ef5e153748d0eac39b4cfe701092d302134f148e 100644 (file)
--- a/lib/formdata.c
+++ b/lib/formdata.c
@@ -923,7 +923,7 @@ static int AddFormData(struct FormData **formp,
     length = strlen((char *)line);
 
   newform->line = (char *)malloc(length+1);
-  memcpy(newform->line, line, length+1);
+  memcpy(newform->line, line, length);
   newform->length = length;
   newform->line[length]=0; /* zero terminate for easier debugging */