From b8f4b3e27ec4ceab7d032c9a4fa96a0fba07e43c Mon Sep 17 00:00:00 2001
From: rlar <rlar>
Date: Sun, 15 May 2016 19:44:30 +0200
Subject: [PATCH] nupa_subcktcall(), fix excess length in pscopy argument

---
 src/frontend/numparam/xpressn.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/frontend/numparam/xpressn.c b/src/frontend/numparam/xpressn.c
index bc1b2f05d..5b88b31f7 100644
--- a/src/frontend/numparam/xpressn.c
+++ b/src/frontend/numparam/xpressn.c
@@ -1542,7 +1542,7 @@ nupa_subcktcall(dico_t *dico, char *s, char *x, char *inst_name)
     if (i >= 0) {
         const char *optr, *jptr;
 
-        pscopy(&tstr, spice_dstring_value(&tstr), i + 7, spice_dstring_length(&tstr));
+        pscopy(&tstr, spice_dstring_value(&tstr), i + 7, (int) strlen(spice_dstring_value(&tstr) + i + 7));
 
         /* search identifier to the left of '=' assignments */