merges r22692 from trunk into ruby_1_9_1.

--
* util.c (ruby_dtoa): allocates one more byte to get rid of buffer
  overrun.  a patch from Charlie Savage at [ruby-core:22604].

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_1@22756 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

1 files changed, 1 insertions, 1 deletions

diff --git a/util.c b/util.c
index 8e166eb2fb..0e065ff0b2 100644
--- a/util.c
+++ b/util.c
@@ -3370,7 +3370,7 @@ ruby_dtoa(double d_, int mode, int ndigits, int *decpt, int *sign, char **rve)
         if (i <= 0)
             i = 1;
     }
-    s = s0 = rv_alloc(i);
+    s = s0 = rv_alloc(i+1);
 
 #ifdef Honor_FLT_ROUNDS
     if (mode > 1 && rounding != 1)