rsrv: fix large array expansion

Causes a crash when a larger buffer is made even larger.
Previous buffer not being free'd correctly.
This commit is contained in:
Michael Davidsaver
2017-07-26 17:58:01 +02:00
parent 306a53503a
commit d2fad17be7
+1 -1
View File
@@ -1392,7 +1392,7 @@ void casExpandBuffer ( struct message_buffer *buf, ca_uint32_t size, int sendbuf
/* free existing buffer */
if(buf->type==mbtSmallTCP) {
freeListFree ( rsrvSmallBufFreeListTCP, buf->buf );
} else if(buf->type==mbtLargeTCP) {
} else if(rsrvLargeBufFreeListTCP && buf->type==mbtLargeTCP) {
freeListFree ( rsrvLargeBufFreeListTCP, buf->buf );
} else {
/* realloc() already free()'d if necessary */