off-by-one for the case when it adds /? and a terminating zero to the URL

diff --git a/src/main.c b/src/main.c
index 2de667606859865add73e09e0266fa4c5e94ab03..0e1935670df26bceb9f830b445fe443a5c597d43 100644 (file)
--- a/src/main.c
+++ b/src/main.c
@@ -3738,7 +3738,7 @@ operate(struct Configurable *config, int argc, char *argv[])
           /*
            * Then append ? followed by the get fields to the url.
            */
-          urlbuffer=(char *)malloc(strlen(url) + strlen(httpgetfields) + 2);
+          urlbuffer=(char *)malloc(strlen(url) + strlen(httpgetfields) + 3);
           if(!urlbuffer) {
             helpf("out of memory\n");
             return CURLE_OUT_OF_MEMORY;