A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.