"msg->size - needed" was the opposite of the value we actually need and could end up being negative if we were appending an attribute larger than the current message size. --- ell/genl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ell/genl.c b/ell/genl.c index 1260020..6177fd5 100644 --- a/ell/genl.c +++ b/ell/genl.c @@ -755,7 +755,7 @@ static bool msg_grow(struct l_genl_msg *msg, uint32_t needed) if (msg->size >= msg->len + needed) return true; - grow_by = msg->size - needed; + grow_by = msg->len + needed - msg->size; if (grow_by < 32) grow_by = 128; -- 2.20.1