Merge pull request #4110 from taosdata/bugfix/td-1939

[TD-1939]<fix>: possible crash in wildcard query

src/tsdb/src/tsdbRead.c

@@ -2311,7 +2311,11 @@ void filterPrepare(void* expr, void* param) {
   if (pInfo->optr == TSDB_RELATION_IN) {
     pInfo->q = (char*) pCond->arr;
   } else {
-    pInfo->q = calloc(1, pSchema->bytes + TSDB_NCHAR_SIZE);   // to make sure tonchar does not cause invalid write, since the '\0' needs at least sizeof(wchar_t) space.
+    uint32_t size = pCond->nLen * TSDB_NCHAR_SIZE;
+    if (size < (uint32_t)pSchema->bytes) {
+      size = pSchema->bytes;
+    }
+    pInfo->q = calloc(1, size + TSDB_NCHAR_SIZE);   // to make sure tonchar does not cause invalid write, since the '\0' needs at least sizeof(wchar_t) space.
     tVariantDump(pCond, pInfo->q, pSchema->type, true);
   }
 }