(main): Fix off-by-one error.

pr -$(perl -e 'print "0"x63 . 1') would write one byte beyond the
end of a malloc'd buffer.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/pr.c b/src/pr.c
index c5f5f28e6..886448b8c 100644
--- a/src/pr.c
+++ b/src/pr.c
@@ -892,7 +892,7 @@ main (int argc, char **argv)
       if (ISDIGIT (c))
 	{
 	  /* Accumulate column-count digits specified via old-style options. */
-	  if (n_digits == n_alloc)
+	  if (n_digits + 1 >= n_alloc)
 	    column_count_string
 	      = x2nrealloc (column_count_string, &n_alloc,
 			    sizeof *column_count_string);