Hi, This change looks good to me, and like good evidence for the benefits of automated tooling :) Thanks! - Emily On Mon, May 06, 2019 at 02:36:58PM -0700, Josh Steadmon wrote: > Free the commit graph when verify_commit_graph_lite() reports an error. > Credit to OSS-Fuzz for finding this leak. > > Signed-off-by: Josh Steadmon <steadmon@xxxxxxxxxx> > --- > commit-graph.c | 4 +++- > 1 file changed, 3 insertions(+), 1 deletion(-) > > diff --git a/commit-graph.c b/commit-graph.c > index 66865acbd7..4bce70d35c 100644 > --- a/commit-graph.c > +++ b/commit-graph.c > @@ -267,8 +267,10 @@ struct commit_graph *parse_commit_graph(void *graph_map, int fd, > last_chunk_offset = chunk_offset; > } > > - if (verify_commit_graph_lite(graph)) > + if (verify_commit_graph_lite(graph)) { > + free(graph); > return NULL; > + } > > return graph; > } > -- > 2.21.0.1020.gf2820cf01a-goog >