Fixed bug #28692 (\0 in Authenticate header passed via safe_mode).

diff --git a/main/SAPI.c b/main/SAPI.c
index 979b37d9c8b5ce8afe39adf058d63fd732f6b975..b1e3488f06529de829d505254de02357bedf73d1 100644 (file)
--- a/main/SAPI.c
+++ b/main/SAPI.c
@@ -650,7 +650,7 @@ SAPI_API int sapi_header_op(sapi_header_op_enum op, void *arg TSRMLS_DC)
                                                        efree(lower_temp);
                                                }
                                        }
-                                       newlen = sizeof("WWW-Authenticate: ") + result_len;
+                                       newlen = sizeof("WWW-Authenticate: ") - 1  + result_len;
                                        newheader = emalloc(newlen+1);
                                        sprintf(newheader,"WWW-Authenticate: %s", result);
                                        efree(header_line);