From c886643f97373944030c118b7f78d0a8c06b2291 Mon Sep 17 00:00:00 2001 From: Pranith K Date: Mon, 14 Mar 2011 04:20:51 +0000 Subject: cluster/afr: Fix wrong memory allocation Signed-off-by: Pranith Kumar K Signed-off-by: Vijay Bellur BUG: 2517 (the size of allocated memory may be wrong) URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=2517 --- xlators/cluster/afr/src/afr-transaction.c | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) (limited to 'xlators/cluster/afr/src/afr-transaction.c') diff --git a/xlators/cluster/afr/src/afr-transaction.c b/xlators/cluster/afr/src/afr-transaction.c index d48d6eb72..4afb7ce6f 100644 --- a/xlators/cluster/afr/src/afr-transaction.c +++ b/xlators/cluster/afr/src/afr-transaction.c @@ -308,24 +308,25 @@ afr_set_piggyback_dict (afr_private_t *priv, dict_t *xattr, int32_t **pending, int ret = 0; int *arr = NULL; int index = 0; + size_t pending_xattr_size = 3 * sizeof (int32_t); + /* 3 = data+metadata+entry */ index = afr_index_for_transaction_type (type); for (i = 0; i < priv->child_count; i++) { - arr = GF_CALLOC (3 * sizeof (int32_t), priv->child_count, + arr = GF_CALLOC (1, pending_xattr_size, gf_afr_mt_char); if (!arr) { ret = -1; goto out; } - memcpy (arr, pending[i], 3 * sizeof (int32_t)); + memcpy (arr, pending[i], pending_xattr_size); arr[index]++; ret = dict_set_bin (xattr, priv->pending_key[i], - arr, 3 * sizeof (int32_t)); - /* 3 = data+metadata+entry */ + arr, pending_xattr_size); if (ret < 0) goto out; -- cgit