--- ./shibboleth-sp2/fastcgi/shibresponder.cpp	2012-09-18 09:32:58.000000000 -0500
+++ ./shibboleth-sp2-2.4.3+dfsg/fastcgi/shibresponder.cpp	2012-10-04 18:46:08.000000000 -0500
@@ -248,10 +248,11 @@ static long gstdin(FCGX_Request* request
         if (clen > STDIN_MAX)
             clen = STDIN_MAX;
 
-        *content = new char[clen];
+        *content = new char[clen + 1];
 
         cin.read(*content, clen);
         clen = cin.gcount();
+	(*content)[clen] = 0;
     }
     else {
         // *never* read stdin when CONTENT_LENGTH is missing or unparsable