Fix 0 byte memory leak in zfs receive

[zfs] / module / zfs / dmu_recv.c

diff --git a/module/zfs/dmu_recv.c b/module/zfs/dmu_recv.c
index a448bc1480ce206c2ed37b10435cd81c81696e74..4ac6f2f17f1447ce6b606cf13aadb1c35486a913 100644 (file)
--- a/module/zfs/dmu_recv.c
+++ b/module/zfs/dmu_recv.c
@@ -1439,7 +1439,12 @@ receive_write(struct receive_writer_arg *rwa, struct drr_write *drrw,
        }
 
        VERIFY0(dnode_hold(rwa->os, drrw->drr_object, FTAG, &dn));
-       dmu_assign_arcbuf_by_dnode(dn, drrw->drr_offset, abuf, tx);
+       err = dmu_assign_arcbuf_by_dnode(dn, drrw->drr_offset, abuf, tx);
+       if (err != 0) {
+               dnode_rele(dn, FTAG);
+               dmu_tx_commit(tx);
+               return (err);
+       }
        dnode_rele(dn, FTAG);
 
        /*
@@ -1780,6 +1785,8 @@ receive_read_payload_and_next_header(struct receive_arg *ra, int len, void *buf)
                        ra->rrd->payload_size = len;
                        ra->rrd->bytes_read = ra->bytes_read;
                }
+       } else {
+               ASSERT3P(buf, ==, NULL);
        }
 
        ra->prev_cksum = ra->cksum;
@@ -1931,9 +1938,12 @@ receive_read_record(struct receive_arg *ra)
        {
                struct drr_object *drro = &ra->rrd->header.drr_u.drr_object;
                uint32_t size = DRR_OBJECT_PAYLOAD_SIZE(drro);
-               void *buf = kmem_zalloc(size, KM_SLEEP);
+               void *buf = NULL;
                dmu_object_info_t doi;
 
+               if (size != 0)
+                       buf = kmem_zalloc(size, KM_SLEEP);
+
                err = receive_read_payload_and_next_header(ra, size, buf);
                if (err != 0) {
                        kmem_free(buf, size);