diff libmpdemux/http.c @ 12083:9aabf1beeb4f

remote exploitable heap overflow fix by ("blexim" <blexim at hush dot com>)

--- a/libmpdemux/http.c	Tue Mar 30 01:05:51 2004 +0000
+++ b/libmpdemux/http.c	Tue Mar 30 10:58:41 2004 +0000
@@ -175,7 +175,7 @@
 	if( http_hdr->method==NULL ) http_set_method( http_hdr, "GET");
 	if( http_hdr->uri==NULL ) http_set_uri( http_hdr, "/");
 	else {
-		uri = (char*)malloc(strlen(http_hdr->uri)*2);
+		uri = (char*)malloc((strlen(http_hdr->uri)*3) + 1);
 		if( uri==NULL ) {
 			mp_msg(MSGT_NETWORK,MSGL_ERR,"Memory allocation failed\n");
 			return NULL;