Taint: fix listcount expansion operator. Bug 2586

[exim.git] / src / src / expand.c

diff --git a/src/src/expand.c b/src/src/expand.c
index b014533c928d3df9c687dd593190f7702b39f336..b01512425e48eeb9d79a2b9a72e0b9c108a1acde 100644 (file)
--- a/src/src/expand.c
+++ b/src/src/expand.c
@@ -7208,9 +7208,8 @@ while (*s != 0)
         {
        int cnt = 0;
        int sep = 0;
-       uschar buffer[256];
 
-       while (string_nextinlist(CUSS &sub, &sep, buffer, sizeof(buffer))) cnt++;
+       while (string_nextinlist(CUSS &sub, &sep, NULL, 0)) cnt++;
        yield = string_fmt_append(yield, "%d", cnt);
         continue;
         }