Christos Zoulas <chris...@netbsd.org> writes:

> To generate a diff of this commit:
> cvs rdiff -u -r1.341 -r1.342 src/sys/kern/kern_exec.c

+       kmem_free(fa->fae, sizeof(*fa->fae));

Two bugs here. fa->fae isn't allocated if (original) fa->len is zero.
And the size of allocation is `sizeof(*fa->fae) * fa->len' (again,
original fa->len).

enami.

Reply via email to