2 files changed, 6 insertions, 1 deletions
diff --git a/ChangeLog b/ChangeLog
index 48452aed51..1f97054f80 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+Sun Mar  1 19:41:25 2009  Nobuyoshi Nakada  <[email protected]>
+
+	* util.c (ruby_dtoa): allocates one more byte to get rid of buffer
+	  overrun.  a patch from Charlie Savage at [ruby-core:22604].
+
 Sun Mar  1 17:27:14 2009  Nobuyoshi Nakada  <[email protected]>
 
 	* ext/bigdecimal/bigdecimal.c (gfDebug): uncommented out.
diff --git a/util.c b/util.c
index de18895cb7..e74277e679 100644
--- a/util.c
+++ b/util.c
@@ -3409,7 +3409,7 @@ dtoa(double d, int mode, int ndigits, int *decpt, int *sign, char **rve)
         if (i <= 0)
             i = 1;
     }
-    s = s0 = rv_alloc(i);
+    s = s0 = rv_alloc(i+1);
 
 #ifdef Honor_FLT_ROUNDS
     if (mode > 1 && rounding != 1)