ITS#1714 dn->bv_val malloc len+1

diff --git a/servers/slapd/sasl.c b/servers/slapd/sasl.c
index 18d2847f6c1aece35be9628e2d50f9d2b8074fa4..ce037a693f14a90a2590330d07eddeca1ac58d5e 100644 (file)
--- a/servers/slapd/sasl.c
+++ b/servers/slapd/sasl.c
@@ -220,7 +220,7 @@ int slap_sasl_getdn( Connection *conn, char *id,
 
                /* Build the new dn */
                c1 = dn->bv_val;
-               dn->bv_val = ch_malloc( len );
+               dn->bv_val = ch_malloc( len+1 );
                p = slap_strcopy( dn->bv_val, "uid=" );
                p = slap_strcopy( p, c1 );
                ch_free( c1 );