26efb91
--- evolution-data-server-1.8.0/camel/camel-object.c.fix-camel-malloc	2006-09-26 16:26:00.000000000 -0400
26efb91
+++ evolution-data-server-1.8.0/camel/camel-object.c	2006-09-26 16:35:32.000000000 -0400
26efb91
@@ -455,9 +455,13 @@
26efb91
 			/* maybe it was just version 0 afterall */
26efb91
 			return 0;
26efb91
 		}
26efb91
+
26efb91
+		count = MIN(count, CAMEL_ARGV_MAX);
26efb91
 		
26efb91
 		/* we batch up the properties and set them in one go */
26efb91
-		if (!(argv = g_try_malloc ((gulong)(sizeof (*argv) + (count - CAMEL_ARGV_MAX) * sizeof (argv->argv[0])))))
26efb91
+		argv = g_try_malloc(sizeof(CamelArgV) -
26efb91
+			((CAMEL_ARGV_MAX - count) * sizeof(CamelArg)));
26efb91
+		if (argv == NULL)
26efb91
 			return -1;
26efb91
 		
26efb91
 		argv->argc = 0;
26efb91
@@ -536,9 +540,12 @@
26efb91
 	   we also need an argv to store the results - bit messy */
26efb91
 
26efb91
 	count = g_slist_length(props);
26efb91
+	count = MIN(count, CAMEL_ARGV_MAX);
26efb91
 
26efb91
-	arggetv = g_malloc0(sizeof(*arggetv) + (count - CAMEL_ARGV_MAX) * sizeof(arggetv->argv[0]));
26efb91
-	argv = g_malloc0(sizeof(*argv) + (count - CAMEL_ARGV_MAX) * sizeof(argv->argv[0]));
26efb91
+	arggetv = g_malloc0(sizeof(CamelArgGetV) -
26efb91
+		((CAMEL_ARGV_MAX - count) * sizeof(CamelArgGet)));
26efb91
+	argv = g_malloc0(sizeof(CamelArgV) -
26efb91
+		((CAMEL_ARGV_MAX - count) * sizeof(CamelArg)));
26efb91
 	l = props;
26efb91
 	i = 0;
26efb91
 	while (l) {