From fa9c5cb8c07f98511e98572c379c63a2f9afc425 Mon Sep 17 00:00:00 2001
From: Simon Rettberg
Date: Fri, 24 Jul 2020 14:24:38 +0200
Subject: [FUSE] Fix returning pending request on RTT measurement

---
 src/fuse/main.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

(limited to 'src/fuse/main.c')

diff --git a/src/fuse/main.c b/src/fuse/main.c
index 736dfc8..df30602 100644
--- a/src/fuse/main.c
+++ b/src/fuse/main.c
@@ -207,7 +207,7 @@ static void image_ll_read( fuse_req_t req, fuse_ino_t ino, size_t size, off_t of
 	if ( offset + size > imageSize ) {
 		size = imageSize - offset;
 	}
-	if ( size == 0 ) {
+	if ( size == 0 || size > UINT32_MAX ) {
 		fuse_reply_err( req, 0 );
 		return;
 	}
@@ -221,13 +221,14 @@ static void image_ll_read( fuse_req_t req, fuse_ino_t ino, size_t size, off_t of
 			++logInfo.blockRequestCount[startBlock];
 		}
 	}
-	dnbd3_async_t *request = malloc( sizeof(dnbd3_async_t) );
+	dnbd3_async_t *request = malloc( sizeof(dnbd3_async_t) + size );
 	request->length = (uint32_t)size;
 	request->offset = offset;
 	request->fuse_req = req;
 
 	if ( !connection_read( request ) ) {
 		fuse_reply_err( req, EIO );
+		free( request );
 	}
 }
 
-- 
cgit v1.2.3-55-g7522