diff -r 7d51dd1e2194 -r d4b21c7f968e src/protocols/toc/toc.c
--- a/src/protocols/toc/toc.c	Fri Sep 21 20:57:20 2001 +0000
+++ b/src/protocols/toc/toc.c	Sat Sep 22 02:19:48 2001 +0000
@@ -847,7 +847,7 @@
 static int toc_send_im(struct gaim_connection *gc, char *name, char *message, int flags)
 {
 	char buf[BUF_LEN * 2];
-	char *tmp = g_malloc(strlen(message) * 2);
+	char *tmp = g_malloc(strlen(message) * 4 + 1); /* 4 because \n gets replaced with <BR> */
 
 	strcpy(tmp, message);
 	escape_text(tmp);