Pass the correct size to free(9) in the error path of db_ctf_decompress().

OK jasper@

diff --git a/sys/ddb/db_ctf.c b/sys/ddb/db_ctf.c
index 5671d5c..0f76b36 100644 (file)
--- a/sys/ddb/db_ctf.c
+++ b/sys/ddb/db_ctf.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: db_ctf.c,v 1.26 2018/01/09 10:19:25 mpi Exp $ */
+/*     $OpenBSD: db_ctf.c,v 1.27 2018/08/31 11:57:04 bluhm Exp $       */
 
 /*
  * Copyright (c) 2016-2017 Martin Pieuchot
@@ -551,7 +551,7 @@ db_ctf_decompress(const char *buf, size_t size, off_t len)
        return data;
 
 exit:
-       free(data, M_DEVBUF, sizeof(*data));
+       free(data, M_DEVBUF, len);
        return NULL;
 }