commit 322b2c9dc4d50ee466c3fb1263b10282009a63cc
author Nikias Bassen <nikias@gmx.li> Tue Feb 07 03:32:32 2017 +0100
committer Nikias Bassen <nikias@gmx.li> Tue Feb 07 03:32:32 2017 +0100
tree a322807fe715bd9aae96ea49eabd511fe5467043
parent 234c41cd7eead5e5a68dbaa80d26335a19cd1d83

xplist: unescape_entities(): Make sure text part buffer is null terminated after strncpy

src/xplist.c

diff --git a/src/xplist.c b/src/xplist.c
index ec00410..782a71c 100644
--- a/src/xplist.c
+++ b/src/xplist.c
@@ -783,6 +783,7 @@
     while (tp && tp->begin) {
         size_t len = tp->length;
         strncpy(p, tp->begin, len);
+        p[len] = '\0';
         if (!tp->is_cdata && unesc_entities) {
             if (unescape_entities(p, &len) < 0) {
                 free(str);