qom: fix off-by-one

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

diff --git a/qom/object.c b/qom/object.c
index 212629defd1a5d5b889c8eea045ad3f917a5d229..7fd37cb879a0051e346590ba7b92baf3dc0606a0 100644 (file)
--- a/qom/object.c
+++ b/qom/object.c
@@ -854,11 +854,8 @@ static void object_set_link_property(Object *obj, Visitor *v, void *opaque,
 
         target = object_resolve_path(path, &ambiguous);
         if (target) {
-            gchar *target_type;
-
-            target_type = g_strdup(&type[5]);
-            target_type[strlen(target_type) - 2] = 0;
-
+            /* Go from link<FOO> to FOO.  */
+            gchar *target_type = g_strndup(&type[5], strlen(type) - 6);
             if (object_dynamic_cast(target, target_type)) {
                 object_ref(target);
                 *child = target;