In vector_alloc_slot func, if REALLOC fails, it means new slot
allocation fails. However, it just update v->allocated and then
return the old v->slot without new slot. So, the caller will take
the last old slot as the new allocated slot, and use it by calling
vector_set_slot func. Finally, the data of last slot is lost.

Here, if REALLOC or MALLOC fails, we will return NULL.

Signed-off-by: Zhiqiang Liu <liuzhiqian...@huawei.com>
Signed-off-by: lixiaokeng <lixiaok...@huawei.com>
---
 libmultipath/vector.c | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/libmultipath/vector.c b/libmultipath/vector.c
index 501cf4c5..29dc9848 100644
--- a/libmultipath/vector.c
+++ b/libmultipath/vector.c
@@ -49,12 +49,14 @@ vector_alloc_slot(vector v)
        else
                new_slot = (void *) MALLOC(sizeof (void *) * v->allocated);

-       if (!new_slot)
+       /* If REALLOC or MALLOC fails, it means new slot allocation fails, so 
return NULL. */
+       if (!new_slot) {
                v->allocated -= VECTOR_DEFAULT_SIZE;
-       else
-               v->slot = new_slot;
+               return NULL;
+       }

-       return v->slot;
+       v->slot = new_slot;
+       return v->slot[VECTOR_SIZE(v) - 1];
 }

 int
-- 
2.24.0.windows.2

--
dm-devel mailing list
dm-devel@redhat.com
https://www.redhat.com/mailman/listinfo/dm-devel

Reply via email to