(read_process_output): Grow decoding_buf when needed;

this could cause a crash in allocate_string and compact_small_strings.

1 files changed, 4 insertions, 0 deletions

diff --git a/src/process.c b/src/process.c
index 1e2bcc3c2ac..4999aebf723 100644
--- a/src/process.c
+++ b/src/process.c
@@ -4896,6 +4896,8 @@ read_process_output (proc, channel)
 
       if (coding->carryover_bytes > 0)
         {
+          if (SCHARS (p->decoding_buf) < coding->carryover_bytes)
+            p->decoding_buf = make_uninit_string (coding->carryover_bytes);
           bcopy (coding->carryover, SDATA (p->decoding_buf),
                  coding->carryover_bytes);
           XSETINT (p->decoding_carryover, coding->carryover_bytes);
@@ -5002,6 +5004,8 @@ read_process_output (proc, channel)
         }
       if (coding->carryover_bytes > 0)
         {
+          if (SCHARS (p->decoding_buf) < coding->carryover_bytes)
+            p->decoding_buf = make_uninit_string (coding->carryover_bytes);
           bcopy (coding->carryover, SDATA (p->decoding_buf),
                  coding->carryover_bytes);
           XSETINT (p->decoding_carryover, coding->carryover_bytes);