--- curl-7.12.1/lib/url.c.2005-4077	2004-07-29 10:06:33.000000000 +0200
+++ curl-7.12.1/lib/url.c	2005-12-08 13:29:48.386334392 +0100
@@ -2206,12 +2206,18 @@
   if(urllen < LEAST_PATH_ALLOC)
     urllen=LEAST_PATH_ALLOC;
 
-  conn->pathbuffer=(char *)malloc(urllen);
+  /*
+  * We malloc() the buffers below urllen+2 to make room for to possibilities:
+  * 1 - an extra terminating zero
+  * 2 - an extra slash (in case a syntax like "www.host.com?moo" is used)
+  */
+
+  conn->pathbuffer=(char *)malloc(urllen+3);
   if(NULL == conn->pathbuffer)
     return CURLE_OUT_OF_MEMORY; /* really bad error */
   conn->path = conn->pathbuffer;
 
-  conn->host.rawalloc=(char *)malloc(urllen);
+  conn->host.rawalloc=(char *)malloc(urllen+3);
   if(NULL == conn->host.rawalloc)
     return CURLE_OUT_OF_MEMORY;
   conn->host.name = conn->host.rawalloc;