(substr): Allocate len+1 bytes (not just len) to leave room for trailing NUL.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/tr.c b/src/tr.c
index fe899c0fe..e34eae180 100644
--- a/src/tr.c
+++ b/src/tr.c
@@ -814,7 +814,7 @@ substr (p, first_idx, last_idx)
      int last_idx;
 {
   int len = last_idx - first_idx + 1;
-  unsigned char *tmp = (unsigned char *) xmalloc (len);
+  unsigned char *tmp = (unsigned char *) xmalloc (len + 1);
 
   assert (first_idx <= last_idx);
   /* We must use bcopy or memcpy rather than strncpy