Unchecked Return Value malloc() in win32 timestr on WINDOWS platform

static apr_size_t win32_strftime_extra(char *s, size_t max, const char *format,
                                       const struct tm *tm) 
{
   /* If the new format string is bigger than max, the result string won't fit
    * anyway. If format strings are added, made sure the padding below is
    * enough */
    char *new_format = (char *) malloc(max + 11); <============ MALLOC
    size_t i, j, format_length = strlen(format);
    apr_size_t return_value;
    int length_written;
 
    for (i = 0, j = 0; (i < format_length && j < max);) {
        if (format[i] != '%') {
            new_format[j++] = format[i++]; <============ INVALID MEMORY REFERENCE
            continue;

BR,
Maksymilian
cifrex.org