From d9ef2b1aceaa6ef61a002ca187c4fa380dd6b528 Mon Sep 17 00:00:00 2001
From: Tom Hacohen <tom@stosb.com>
Date: Tue, 28 Jan 2014 10:10:05 +0000
Subject: [PATCH] Edje entry: Fix memory corruption (of by one in allocation).

This fixes T867.
---
 src/lib/edje/edje_entry.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/edje/edje_entry.c b/src/lib/edje/edje_entry.c
index 5754a578ab..8b4d899a28 100644
--- a/src/lib/edje/edje_entry.c
+++ b/src/lib/edje/edje_entry.c
@@ -1072,7 +1072,7 @@ _anchor_format_parse(const char *item)
    if (end) len = end - start;
    else len = strlen(start);
 
-   tmp = malloc(len);
+   tmp = malloc(len + 1);
    strncpy(tmp, start, len);
    tmp[len] = '\0';