buffer was too small

diff --git a/ext/xslt/xslt.c b/ext/xslt/xslt.c
index 2ec424ce4e7f85db8d28c0990ad948bdd5535615..48cffef156dbef615456eb1575c97781a8b018ad 100644 (file)
--- a/ext/xslt/xslt.c
+++ b/ext/xslt/xslt.c
@@ -89,7 +89,7 @@ extern void xslt_make_array(zval **zarr, char ***carr)
                return;
        }
 
-       *carr = emalloc((zend_hash_num_elements(arr) * 2) + 1);
+       *carr = emalloc(((zend_hash_num_elements(arr) * 2) + 1) * sizeof(char *));
        
        for (zend_hash_internal_pointer_reset(arr);
             zend_hash_get_current_data(arr, (void **) &current) == SUCCESS;