From 4e7389e44bcdba1bc0666313bf65128c0b18012a Mon Sep 17 00:00:00 2001
From: Alexandre Julliard <julliard@winehq.org>
Date: Thu, 17 Dec 2009 14:12:30 +0100
Subject: [PATCH] mapi32: Fix a heap buffer overflow.

---
 dlls/mapi32/util.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dlls/mapi32/util.c b/dlls/mapi32/util.c
index 71a5e1aec59..90cfa6ecd67 100644
--- a/dlls/mapi32/util.c
+++ b/dlls/mapi32/util.c
@@ -1037,7 +1037,7 @@ void load_mapi_providers(void)
     TRACE("appName: %s\n", debugstr_w(appName));
 
     appKey = HeapAlloc(GetProcessHeap(), 0, sizeof(WCHAR) * (lstrlenW(regkey_mail) +
-        lstrlenW(regkey_backslash) + lstrlenW(appName)));
+        lstrlenW(regkey_backslash) + lstrlenW(appName) + 1));
 
     if (!appKey)
         goto cleanUp;