From 270ec0c14b4de7a99bddf67f71eae6f58918b205 Mon Sep 17 00:00:00 2001
From: Dave Davenport <qball@gmpclient.org>
Date: Tue, 22 Dec 2015 20:57:57 +0100
Subject: [PATCH] Fix out of memory bound on array

---
 source/dialogs/dmenu.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/source/dialogs/dmenu.c b/source/dialogs/dmenu.c
index f1d34c48..99a59aa3 100644
--- a/source/dialogs/dmenu.c
+++ b/source/dialogs/dmenu.c
@@ -94,8 +94,8 @@ static char **get_dmenu ( FILE *fd, unsigned int *length )
         }
     }
     if ( retv != NULL ) {
-        retv[( *length ) + 1] = NULL;
         retv                  = g_realloc ( retv, ( *length + 1 ) * sizeof ( char* ) );
+        retv[( *length ) ] = NULL;
     }
     TICK_N ( "Read stdin STOP" );
     return retv;