Fix for CVE-2008-5050, applied upstream in 0.94.1
svn diff -c 4311 http://svn.clamav.net/svn/clamav-devel/
diff -pruN clamav-0.92.1.orig/libclamav/vba_extract.c clamav-0.92.1/libclamav/vba_extract.c
--- clamav-0.92.1.orig/libclamav/vba_extract.c 2008-01-28 22:30:35.000000000 +0100
+++ clamav-0.92.1/libclamav/vba_extract.c 2008-11-13 19:17:44.000000000 +0100
@@ -136,7 +136,7 @@ get_unicode_name(const char *name, int s
if((name == NULL) || (*name == '\0') || (size <= 0))
return NULL;
- newname = (char *)cli_malloc(size * 7);
+ newname = (char *)cli_malloc(size * 7 + 1);
if(newname == NULL)
return NULL;