record_render: fix buffer overrun

This appeared as charset=.. being ignored for base64 conversions,
but could also be giving SEGVs.

diff --git a/src/record_render.c b/src/record_render.c
index 1c8c06a..06c1184 100644 (file)
--- a/src/record_render.c
+++ b/src/record_render.c
@@ -465,7 +465,7 @@ const char *yaz_record_render(Z_NamePlusRecord *npr, const char *schema,
     if (base64_xpath)
     {
         char *type_spec = nmem_malloc(nmem,
-                                      strlen(format) + strlen(charset) + 11);
+                                      strlen(type) + strlen(charset) + 11);
         strcpy(type_spec, type);
         if (*charset)
         {