* fixed buffer overrun in tai_aggregatetypedconst.add_to_string()

git-svn-id: trunk@33988 -
This commit is contained in:
Jonas Maebe 2016-06-15 18:31:42 +00:00
parent 8c006f04e2
commit 8ca9ece66a

View File

@ -682,7 +682,8 @@ implementation
begin
if tai_const(othertai).size<>1 then
internalerror(2014070101);
strtai.str:=reallocmem(strtai.str,strtai.len+1);
{ it was already len+1 to hold the #0 -> realloc to len+2 }
strtai.str:=reallocmem(strtai.str,strtai.len+2);
strtai.str[strtai.len]:=ansichar(tai_const(othertai).value);
strtai.str[strtai.len+1]:=#0;
inc(strtai.len);