Don't read/write after the string when the synthesis is slightly malformed

(backported from trunk)

2 files changed, 4 insertions, 1 deletions

diff --git a/NEWS b/NEWS
index 082bbdf..2b4af68 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,6 @@
+- don't read/write after the string when the synthesis is slightly
+  malformed
+
 Version 3.38.1.1 - 29 February 2012
 
 - do not add FILENAME_TAG to hdlist anymore (unused since mdv2008)
diff --git a/URPM.xs b/URPM.xs
index 149e5f2..091cd10 100644
--- a/URPM.xs
+++ b/URPM.xs
@@ -1906,7 +1906,7 @@ Pkg_filename(pkg)
   if (pkg->info) {
     char *eon;
 
-    if ((eon = strchr(pkg->info, '@')) != NULL) {
+    if ((eon = strchr(pkg->info, '@')) != NULL && strlen(eon) >= 3) {
 	char savbuf[4];
 	memcpy(savbuf, eon, 4); /* there should be at least epoch and size described so (@0@0 minimum) */
 	memcpy(eon, ".rpm", 4);