krb5int_get_plugin_dir_data() uses + instead of * in realloc

In line 570, in reallocating the plugin tree - the memory allocated is
(count + 1) + sizeof(*p)

instead of

(count +1 ) * sizeof(*p)

Detected while running the krb5kdc under valgrind with memcheck.

ticket: new
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18070 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/util/support/plugins.c b/src/util/support/plugins.c
index 0945d3995ffb1e99ba6dacd309f02494b9011eb1..de659cb1a269fa836b638573e3823360b715d514 100644 (file)
--- a/src/util/support/plugins.c
+++ b/src/util/support/plugins.c
@@ -567,7 +567,7 @@ krb5int_get_plugin_dir_data (struct plugin_dir_handle *dirhandle,
                 void **newp = NULL;
 
                 count++;
-                newp = realloc (p, ((count + 1) + sizeof (*p))); /* +1 for NULL */
+                newp = realloc (p, ((count + 1) * sizeof (*p))); /* +1 for NULL */
                 if (newp == NULL) { 
                     err = errno; 
                 } else {