Fix out of bounds array assignment.

src/language-matcher.cc

 // Copyright 2011 the v8-i18n authors.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
 // You may obtain a copy of the License at
 //
 //    http://www.apache.org/licenses/LICENSE-2.0
 //
 // Unless required by applicable law or agreed to in writing, software
 // distributed under the License is distributed on an "AS IS" BASIS,
@@ skipping 169 matching lines @@
 static bool BCP47ToICUFormat(const char* locale_id, char* result) {
   UErrorCode status = U_ZERO_ERROR;
   int32_t locale_size = 0;
 
   char locale[ULOC_FULLNAME_CAPACITY];
   Utils::StrNCopy(locale, ULOC_FULLNAME_CAPACITY, locale_id);
 
   // uloc_forLanguageTag has a bug where long extension can crash the code.
   // We need to check if extension part of language id conforms to the length.
   // ICU bug: http://bugs.icu-project.org/trac/ticket/8519
-  const char* extension = strstr(locale_id, "-u-");
+  const char* extension = strstr(locale, "-u-");
   if (extension != NULL &&
       strlen(extension) > ULOC_KEYWORD_AND_VALUES_CAPACITY) {
     // Truncate to get non-crashing string, but still preserve base language.
-    int base_length = strlen(locale_id) - strlen(extension);
+    int base_length = strlen(locale) - strlen(extension);
     locale[base_length] = '\0';
   }
 
   uloc_forLanguageTag(locale, result, ULOC_FULLNAME_CAPACITY,
                       &locale_size, &status);
   return !U_FAILURE(status);
 }
 
 // Compares locale id subtags.
 // Returns 1 for match or -1 for mismatch.
@@ skipping 24 matching lines @@
   }
 
   // Convert ICU locale name into BCP47 format.
   UErrorCode status = U_ZERO_ERROR;
   uloc_toLanguageTag(result->icu_id, result->bcp47_id,
                      ULOC_FULLNAME_CAPACITY, false, &status);
   return !U_FAILURE(status);
 }
 
 }  // namespace v8_i18n