Re: [PATCH 4/6] strbuf-safe: add sstrbuf_grow()

[Junio C Hamano <gitster@pobox.com>]

"Derrick Stolee via GitGitGadget" <gitgitgadget@gmail.com> writes:

> +int srealloc(void **ptr, size_t size)
>  {
>  	if (!size) {
> +		free(*ptr);
> +		if ((*ptr = malloc(1)))
> +			return 0;
> +		return -1;
>  	}
>  
> +	if (safe_memory_limit_check(size, 0))
> +		return -1;
> +	if ((*ptr = realloc(*ptr, size)))
> +		return 0;
> +
> +	return -1;
> +}

This overrites *ptr with whatever realloc() returns, and then checks
if we had an error, thereby losing whatever pointer *ptr originally
had.  When realloc() does fail, we have already clobbered *ptr, and
very likely have robbed our caller the pointer it had to the region
of memory.  Aren't we leaking that piece of memory as the result?