On Mon, Mar 10, 2014 at 11:55:59PM -0700, Darrick J. Wong wrote: > In ext2fs_extent_free(), h(andle)->max_depth is used as a loop > conditional variable to free all the h->path[].buf pointers. However, > ext2fs_extent_delete() sets max_depth = 0 if we've removed everything > from the extent tree, which causes a subsequent _free() to leak some > buf pointers. max_depth can be re-incremented when splitting extent > nodes, but there's no guarantee that it'll reach the old value before > the free. > > Therefore, remember the size of h->paths[] separately, and use that > when freeing the extent handle. > > Signed-off-by: Darrick J. Wong <darrick.wong@xxxxxxxxxx> Thanks, applied. - Ted -- To unsubscribe from this list: send the line "unsubscribe linux-ext4" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
