===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/rcs/rcs.c,v
retrieving revision 1.22
retrieving revision 1.23
diff -u -r1.22 -r1.23
--- src/usr.bin/rcs/rcs.c	2006/07/08 09:25:44	1.22
+++ src/usr.bin/rcs/rcs.c	2006/07/11 18:36:32	1.23
@@ -1,4 +1,4 @@
-/*	$OpenBSD: rcs.c,v 1.22 2006/07/08 09:25:44 ray Exp $	*/
+/*	$OpenBSD: rcs.c,v 1.23 2006/07/11 18:36:32 markus Exp $	*/
 /*
  * Copyright (c) 2004 Jean-Francois Brousseau <jfb@openbsd.org>
  * All rights reserved.
@@ -2756,7 +2756,7 @@
 					errx(1, "rcs_expand_keywords: string truncated");
 
 			sizdiff = strlen(expbuf) - (end - start);
-			tbuflen = len - (end - start);
+			tbuflen = fin - end;
 			tbuf = xmalloc(tbuflen);
 			memcpy(tbuf, end, tbuflen);
 			/* only realloc if we have to */