ozten/sasl-browserid — comment on commit d2cbf17429acb201f60af2744265249581c0f04f
File: plugins/browserid.c line 95
By ozten:

Okay, good point. Looking at other plugins in cyrus sasl distribution they use strlen for client/serveroutputlen and use + 1 in calls to malloc.