Fix crash in auto-comment

Trailing linefeeds in AppendComment were not properly stripped off,
leading to a mismatch between the allocted and used memory, and thus
possible buffer overruns.

diff --git a/backend.c b/backend.c
index a3b0f0c..02cc45e 100644 (file)
--- a/backend.c
+++ b/backend.c
@@ -14903,6 +14903,7 @@ if(appData.debugMode) fprintf(debugFP, "Append: in='%s' %d\n", text, addBraces);
     while (*text == '\n') text++;
     len = strlen(text);
     while (len > 0 && text[len - 1] == '\n') len--;
+    text[len] = NULLCHAR;
 
     if (len == 0) return;