Fix possible buffer overflow (CVE 2010-5109)