Christos Zoulas <chris...@netbsd.org> writes: > To generate a diff of this commit: > cvs rdiff -u -r1.341 -r1.342 src/sys/kern/kern_exec.c
+ kmem_free(fa->fae, sizeof(*fa->fae)); Two bugs here. fa->fae isn't allocated if (original) fa->len is zero. And the size of allocation is `sizeof(*fa->fae) * fa->len' (again, original fa->len). enami.