(read_process_output): Grow decoding_buf when needed;

this could cause a crash in allocate_string and compact_small_strings.

1 files changed, 4 insertions, 0 deletions

diff --git a/src/process.c b/src/process.c
index 868143bd12e..bbfc06c3082 100644
--- a/src/process.c
+++ b/src/process.c
@@ -4894,6 +4894,8 @@ read_process_output (proc, channel)
         }
 
       carryover = nbytes - coding->consumed;
+      if (SCHARS (p->decoding_buf) < carryover)
+        p->decoding_buf = make_uninit_string (carryover);
       bcopy (chars + coding->consumed, SDATA (p->decoding_buf),
              carryover);
       XSETINT (p->decoding_carryover, carryover);
@@ -4998,6 +5000,8 @@ read_process_output (proc, channel)
             }
         }
       carryover = nbytes - coding->consumed;
+      if (SCHARS (p->decoding_buf) < carryover)
+        p->decoding_buf = make_uninit_string (carryover);
       bcopy (chars + coding->consumed, SDATA (p->decoding_buf),
              carryover);
       XSETINT (p->decoding_carryover, carryover);