qom: fix off-by-one

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

qom/object.c

@@ -854,11 +854,8 @@ static void object_set_link_property(Object *obj, Visitor *v, void *opaque,
 
         target = object_resolve_path(path, &ambiguous);
         if (target) {
-            gchar *target_type;
-
-            target_type = g_strdup(&type[5]);
-            target_type[strlen(target_type) - 2] = 0;
-
+            /* Go from link<FOO> to FOO.  */
+            gchar *target_type = g_strndup(&type[5], strlen(type) - 6);
             if (object_dynamic_cast(target, target_type)) {
                 object_ref(target);
                 *child = target;