fixed buffer-overwrite

diff --git a/ext/standard/string.c b/ext/standard/string.c
index 2cdd40d51ddfee2d19de58bde4e5b37f9beb81b3..5cf17d9aeff5da7a5d1fdd1a9d5386d721b04775 100644 (file)
--- a/ext/standard/string.c
+++ b/ext/standard/string.c
@@ -412,7 +412,7 @@ PHP_FUNCTION(wordwrap)
        }
        else {
                /* Multiple character line break */
-               newtext = emalloc((*ptext)->value.str.len * (breakcharlen+1));
+               newtext = emalloc((*ptext)->value.str.len * (breakcharlen+1)+1);
                newtext[0] = '\0';
 
                i = 0;