From 574a09c0eb9b6c2ef061b23401f4538cd6e6f96c Mon Sep 17 00:00:00 2001
From: blymn <blymn@NetBSD.org>
Date: Mon, 10 Dec 2001 12:11:05 +0000
Subject: [PATCH] Fix off by one bug in t_agetstr - the pointer is moved to one
 past the end of the termcap capability string.

---
 lib/libterm/termcap.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lib/libterm/termcap.c b/lib/libterm/termcap.c
index 25ce58d37589..c42e1d29b897 100644
--- a/lib/libterm/termcap.c
+++ b/lib/libterm/termcap.c
@@ -1,4 +1,4 @@
-/*	$NetBSD: termcap.c,v 1.42 2001/12/02 06:38:51 blymn Exp $	*/
+/*	$NetBSD: termcap.c,v 1.43 2001/12/10 12:11:05 blymn Exp $	*/
 
 /*
  * Copyright (c) 1980, 1993
@@ -38,7 +38,7 @@
 #if 0
 static char sccsid[] = "@(#)termcap.c	8.1 (Berkeley) 6/4/93";
 #else
-__RCSID("$NetBSD: termcap.c,v 1.42 2001/12/02 06:38:51 blymn Exp $");
+__RCSID("$NetBSD: termcap.c,v 1.43 2001/12/10 12:11:05 blymn Exp $");
 #endif
 #endif /* not lint */
 
@@ -470,7 +470,7 @@ t_agetstr(struct tinfo *info, const char *id)
 	if (new_size == 0)
 		return NULL;
 
-	if ((tb = info->tbuf) == NULL || (tb->eptr - tb->ptr) < new_size) {
+	if ((tb = info->tbuf) == NULL || (tb->eptr - tb->ptr) < (new_size + 1)) {
 		if (new_size < BSIZE)
 			new_size = BSIZE;
 		else