diff --git a/code_sign/code_sign_ioctl.c b/code_sign/code_sign_ioctl.c
index 16e640c6a648268ab8af7a35d9f7ed10254cac24..79f12386ba51343b739dd902b2b1b95706d74fa7 100644
--- a/code_sign/code_sign_ioctl.c
+++ b/code_sign/code_sign_ioctl.c
@@ -213,7 +213,7 @@ int parse_cert_source(unsigned long args, struct cert_source **_source)
 		goto copy_source_failed;
 	}
 
-	source->subject = kzalloc(info.signing_length, GFP_KERNEL);
+	source->subject = kzalloc(info.signing_length + 1, GFP_KERNEL);
 	if (!source->subject) {
 		ret = -ENOMEM;
 		goto copy_source_failed;
@@ -225,7 +225,7 @@ int parse_cert_source(unsigned long args, struct cert_source **_source)
 		goto copy_subject_failed;
 	}
 
-	source->issuer = kzalloc(info.issuer_length, GFP_KERNEL);
+	source->issuer = kzalloc(info.issuer_length + 1, GFP_KERNEL);
 	if (!source->issuer) {
 		ret = -ENOMEM;
 		goto copy_subject_failed;