[PATCH] msi: correct buffer overrun in msi_get_deferred_action().

[William Waghorn]

---
  dlls/msi/custom.c |    2 +-
  1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/dlls/msi/custom.c b/dlls/msi/custom.c
index 390113e..17f581c 100644
--- a/dlls/msi/custom.c
+++ b/dlls/msi/custom.c
@@ -153,7 +153,7 @@ static LPWSTR msi_get_deferred_action(LPCWSTR 
action, LPCWSTR actiondata,
          return strdupW(action);

      len = lstrlenW(action) + lstrlenW(actiondata) +
-          lstrlenW(usersid) + lstrlenW(prodcode) + 5;
+          lstrlenW(usersid) + lstrlenW(prodcode) + 9;
      deferred = msi_alloc(len * sizeof(WCHAR));

      sprintfW(deferred, format, actiondata, usersid, prodcode, action);
-- 
1.5.2.4