Fix for CVE-2008-5050, applied upstream in 0.94.1
svn diff -c 4311 http://svn.clamav.net/svn/clamav-devel/
diff -pruN clamav-0.93.3.orig/libclamav/vba_extract.c clamav-0.93.3/libclamav/vba_extract.c
--- clamav-0.93.3.orig/libclamav/vba_extract.c 2008-05-27 13:44:35.000000000 +0200
+++ clamav-0.93.3/libclamav/vba_extract.c 2008-11-13 19:14:18.000000000 +0100
@@ -107,7 +107,7 @@ get_unicode_name(const char *name, int s
if((name == NULL) || (*name == '\0') || (size <= 0))
return NULL;
- newname = (char *)cli_malloc(size * 7);
+ newname = (char *)cli_malloc(size * 7 + 1);
if(newname == NULL)
return NULL;