btrfs-progs: subvol sync: fix memory corruption, undersized array

[platform/upstream/btrfs-progs.git] / cmds-subvolume.c

diff --git a/cmds-subvolume.c b/cmds-subvolume.c
index 02e1dec..32caaa5 100644 (file)
--- a/cmds-subvolume.c
+++ b/cmds-subvolume.c
@@ -1204,7 +1204,8 @@ static int enumerate_dead_subvols(int fd, u64 **ids)
                                        u64 *newids;
 
                                        count += SUBVOL_ID_BATCH;
-                                       newids = (u64*)realloc(*ids, count);
+                                       newids = (u64*)realloc(*ids,
+                                                       count * sizeof(u64));
                                        if (!newids)
                                                return -ENOMEM;
                                        *ids = newids;