From: Fam Zheng <f...@redhat.com> Zeroing a buffer that will be filled right after is not necessary, and allocating a power of two + 1 is naughty.
Suggested-by: Markus Armbruster <arm...@redhat.com> Signed-off-by: Fam Zheng <f...@redhat.com> Reviewed-by: Don Koch <dk...@verizon.com> Reviewed-by: Markus Armbruster <arm...@redhat.com> Reviewed-by: Max Reitz <mre...@redhat.com> Message-id: 1417649314-13704-4-git-send-email-f...@redhat.com Signed-off-by: Max Reitz <mre...@redhat.com> Signed-off-by: Kevin Wolf <kw...@redhat.com> --- block/vmdk.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/block/vmdk.c b/block/vmdk.c index 4ee0aed..5f43226 100644 --- a/block/vmdk.c +++ b/block/vmdk.c @@ -557,8 +557,8 @@ static char *vmdk_read_desc(BlockDriverState *file, uint64_t desc_offset, return NULL; } - size = MIN(size, 1 << 20); /* avoid unbounded allocation */ - buf = g_malloc0(size + 1); + size = MIN(size, (1 << 20) - 1); /* avoid unbounded allocation */ + buf = g_malloc(size + 1); ret = bdrv_pread(file, desc_offset, buf, size); if (ret < 0) { @@ -566,6 +566,7 @@ static char *vmdk_read_desc(BlockDriverState *file, uint64_t desc_offset, g_free(buf); return NULL; } + buf[ret] = 0; return buf; } -- 1.8.3.1