fixed buffer overrun in LOM math argument processing

Author: nixnodes

ChangeLog

@@ -39,6 +39,7 @@
  *   2.6.7:
  *   - % Removed 'glconf.h' dependancy when compiling the filesystem search utility
  *   - ~ Fixed segfault when running dirlog update on a very small log
+ *   - ~ Fixed buffer overrun in LOM math argument processing 
  *
  * v2.5:
  *

src/m_lom.c

@@ -837,7 +837,7 @@ g_get_lom_g_t_ptr (__g_handle hdl, char *field, __g_lom lom, uint32_t flags)
       md_init (&lom->math_r, 8);
 
       size_t field_l = strlen (field);
-      char *m_field = calloc (field_l, 1);
+      char *m_field = calloc (field_l + 1, 1);
       if (copy_and_term_math_field (field, m_field, field_l))
 	{
 	  free (m_field);