Fixed buffer overflow.

src/filesystem/cocoa/SDL_sysfilesystem.m

@@ -77,7 +77,7 @@ SDL_GetPrefPath(const char *org, const char *app)
         NSString *str = [array objectAtIndex:0];
         const char *base = [str fileSystemRepresentation];
         if (base) {
-            const size_t len = SDL_strlen(base) + SDL_strlen(app) + 4;
+            const size_t len = SDL_strlen(base) + SDL_strlen(org) + SDL_strlen(app) + 4;
             retval = (char *) SDL_malloc(len);
             if (retval == NULL) {
                 SDL_OutOfMemory();