final fix for map_size

2 files changed, 5 insertions, 1 deletions

diff --git a/src/afl-common.c b/src/afl-common.c
index 45868271..38c19234 100644
--- a/src/afl-common.c
+++ b/src/afl-common.c
@@ -404,9 +404,13 @@ u8 *find_binary(u8 *fname) {
       env_path = delim;
 
       if (cur_elem[0]) {
+
         target_path = alloc_printf("%s/%s", cur_elem, fname);
+
       } else {
+
         target_path = ck_strdup(fname);
+
       }
 
       ck_free(cur_elem);
diff --git a/src/afl-fuzz-state.c b/src/afl-fuzz-state.c
index 476782e0..86dafb3e 100644
--- a/src/afl-fuzz-state.c
+++ b/src/afl-fuzz-state.c
@@ -103,7 +103,7 @@ void afl_state_init(afl_state_t *afl, uint32_t map_size) {
   afl->virgin_tmout = ck_alloc(map_size);
   afl->virgin_crash = ck_alloc(map_size);
   afl->var_bytes = ck_alloc(map_size);
-  afl->top_rated = ck_alloc(map_size);
+  afl->top_rated = ck_alloc(map_size * sizeof(void *));
   afl->clean_trace = ck_alloc(map_size);
   afl->clean_trace_custom = ck_alloc(map_size);
   afl->first_trace = ck_alloc(map_size);