cmd: Size buffer in create_full_path() correctly.

diff --git a/programs/cmd/builtins.c b/programs/cmd/builtins.c
index c63360bf23026f3a133b8b6695095c68bb083212..d1019ccb879ea8d9829cd1a7fc51fc28e5473597 100644 (file)
--- a/programs/cmd/builtins.c
+++ b/programs/cmd/builtins.c
@@ -319,7 +319,7 @@ static BOOL create_full_path(WCHAR* path)
     WCHAR *new_path;
     BOOL ret = TRUE;
 
-    new_path = HeapAlloc(GetProcessHeap(),0,(strlenW(path) * sizeof(WCHAR))+1);
+    new_path = HeapAlloc(GetProcessHeap(),0,(strlenW(path)+1) * sizeof(WCHAR));
     strcpyW(new_path,path);
 
     while ((len = strlenW(new_path)) && new_path[len - 1] == '\\')