From 437f92385aefc8b8e6ac306b27bc34fd6f5bd8e2 Mon Sep 17 00:00:00 2001
From: rlar <rlar>
Date: Sat, 25 Nov 2017 19:09:53 +0100
Subject: [PATCH] nupa_subcktcall(), avoid `jp' pointing beyond end of string

The skip whitespace loop in the following line shall
  safely swallow the delimiting space instead
---
 src/frontend/numparam/xpressn.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/frontend/numparam/xpressn.c b/src/frontend/numparam/xpressn.c
index deb3e5496..9ddd12c1e 100644
--- a/src/frontend/numparam/xpressn.c
+++ b/src/frontend/numparam/xpressn.c
@@ -1607,7 +1607,7 @@ nupa_subcktcall(dico_t *dico, char *s, char * const x, char * const inst_name)
         char *p_subname = search_isolated_identifier(t_p, spice_dstring_value(&subname));
 
         if (p_subname) {
-            char *jp = p_subname + spice_dstring_length(&subname) + 1; /* 1st position of arglist */
+            char *jp = p_subname + spice_dstring_length(&subname); /* 1st position of arglist */
 
             while ((jp < ls_ptr) && ((*jp <= ' ') || (*jp == ',')))
                 jp++;