[Wine-patches] [eter-2.1] ieframe: Fix heap corruption caused by allocating 1 byte for a WCHAR (terminating \0).

[Dmitry Timoshkov]

---
 dlls/ieframe/navigate.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/dlls/ieframe/navigate.c b/dlls/ieframe/navigate.c
index 5e7d264..4121298 100644
--- a/dlls/ieframe/navigate.c
+++ b/dlls/ieframe/navigate.c
@@ -932,9 +932,9 @@ HRESULT navigate_url(DocHost *This, LPCWSTR url, const VARIANT *Flags,
        new_url = HeapAlloc(GetProcessHeap(),0,sizeof(WCHAR)*(strlenW(url)+8));
        strcpyW(new_url, httpW);
        new_url = strcatW(new_url,url);
-       TRACE("Add Default protocol /n");
+       TRACE("Add Default protocol\n");
     } else {
-       new_url = HeapAlloc(GetProcessHeap(),0,sizeof(WCHAR)*strlenW(url)+1);
+       new_url = HeapAlloc(GetProcessHeap(),0,sizeof(WCHAR)*(strlenW(url)+1));
        strcpyW(new_url, url);
     }
 
-- 
2.6.3