Missed a reference to + sizeof() vs * sizeof(). Pointed out by

william fiveash.

ticket: 3825
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18071 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/util/support/plugins.c b/src/util/support/plugins.c
index de659cb1a269fa836b638573e3823360b715d514..9d025942ecd9907737259ac8d7623219a058ac31 100644 (file)
--- a/src/util/support/plugins.c
+++ b/src/util/support/plugins.c
@@ -626,7 +626,7 @@ krb5int_get_plugin_dir_func (struct plugin_dir_handle *dirhandle,
                 void (**newp)() = NULL;
 
                 count++;
-                newp = realloc (p, ((count + 1) + sizeof (*p))); /* +1 for NULL */
+                newp = realloc (p, ((count + 1) * sizeof (*p))); /* +1 for NULL */
                 if (newp == NULL) { 
                     err = errno; 
                 } else {