Negative allocation when ngram_prob is called with 0 words

[guidovranken]

#include <sphinxbase/logmath.h>
#include <sphinxbase/ngram_model.h>

int main(void)
{
    logmath_t* lm = logmath_init(1.0001, 0, 0);
    ngram_model_t* model = ngram_model_read(NULL, "100.lm.dmp", NGRAM_BIN, lm);
    ngram_prob(model, NULL, 0);
    ngram_model_free(model);
    logmath_free(lm);
    return 0;
}

This could lead to a crash.

If you acknowledge and fix this, could you please credit 'ForAllSecure Mayhem'?

Thanks