From c6efc1ed843363952918377f0eb09c64a0316281 Mon Sep 17 00:00:00 2001
From: shenglian zhou <shenglian_zhou@163.com>
Date: Mon, 14 Nov 2022 14:32:34 +0800
Subject: [PATCH 1/3] fix: fix memory leak during crashgen stream and subscribe

---
 source/common/src/tmsg.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/source/common/src/tmsg.c b/source/common/src/tmsg.c
index 2eb94773e9..bd8e34a395 100644
--- a/source/common/src/tmsg.c
+++ b/source/common/src/tmsg.c
@@ -2591,7 +2591,10 @@ int32_t tDeserializeSUseDbBatchRsp(void *buf, int32_t bufLen, SUseDbBatchRsp *pR
 
   for (int32_t i = 0; i < numOfBatch; ++i) {
     SUseDbRsp usedbRsp = {0};
-    if (tDeserializeSUseDbRspImp(&decoder, &usedbRsp) < 0) return -1;
+    if (tDeserializeSUseDbRspImp(&decoder, &usedbRsp) < 0) {
+      tDecoderClear(&decoder);
+      return -1;
+    }
     taosArrayPush(pRsp->pArray, &usedbRsp);
   }
   tEndDecode(&decoder);

From aa9e935854ed1074939fca7490f62de3077d3553 Mon Sep 17 00:00:00 2001
From: Liu Jicong <liujicong@qq.com>
Date: Mon, 14 Nov 2022 14:46:50 +0800
Subject: [PATCH 2/3] enh(stream): set path max length to 1024

---
 source/libs/stream/src/streamState.c | 6 +++---
 source/libs/wal/src/walWrite.c       | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/source/libs/stream/src/streamState.c b/source/libs/stream/src/streamState.c
index 88c39c1157..aefe30116b 100644
--- a/source/libs/stream/src/streamState.c
+++ b/source/libs/stream/src/streamState.c
@@ -114,12 +114,12 @@ SStreamState* streamStateOpen(char* path, SStreamTask* pTask, bool specPath, int
     return NULL;
   }
 
-  char statePath[300];
+  char statePath[1024];
   if (!specPath) {
     sprintf(statePath, "%s/%d", path, pTask->taskId);
   } else {
-    memset(statePath, 0, 300);
-    tstrncpy(statePath, path, 300);
+    memset(statePath, 0, 1024);
+    tstrncpy(statePath, path, 1024);
   }
   if (tdbOpen(statePath, szPage, pages, &pState->db, 0) < 0) {
     goto _err;
diff --git a/source/libs/wal/src/walWrite.c b/source/libs/wal/src/walWrite.c
index b683ba1926..7ced5fae39 100644
--- a/source/libs/wal/src/walWrite.c
+++ b/source/libs/wal/src/walWrite.c
@@ -319,7 +319,7 @@ int32_t walEndSnapshot(SWal *pWal) {
   SWalFileInfo *pInfo = taosArraySearch(pWal->fileInfoSet, &tmp, compareWalFileInfo, TD_LE);
   if (pInfo) {
     if (ver >= pInfo->lastVer) {
-      pInfo--;
+      pInfo++;
     }
     if (POINTER_DISTANCE(pInfo, pWal->fileInfoSet->pData) > 0) {
       wDebug("vgId:%d, begin remove from %" PRId64, pWal->cfg.vgId, pInfo->firstVer);

From 7420b0aaafeb17da16436ca4587df0309f75e504 Mon Sep 17 00:00:00 2001
From: Minghao Li <castermode@gmail.com>
Date: Mon, 14 Nov 2022 15:24:59 +0800
Subject: [PATCH 3/3] fix(sync): fix memory error

---
 source/libs/sync/src/syncMain.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/source/libs/sync/src/syncMain.c b/source/libs/sync/src/syncMain.c
index 7ed90fb140..5ceca36aac 100644
--- a/source/libs/sync/src/syncMain.c
+++ b/source/libs/sync/src/syncMain.c
@@ -1832,6 +1832,9 @@ static void syncNodeEqElectTimer(void* param, void* tmrId) {
   SElectTimer* pElectTimer = param;
   SSyncNode*   pNode = pElectTimer->pSyncNode;
 
+  if (pNode == NULL) return;
+  if (pNode->syncEqMsg == NULL) return;
+
   SRpcMsg rpcMsg = {0};
   int32_t code = syncBuildTimeout(&rpcMsg, SYNC_TIMEOUT_ELECTION, pElectTimer->logicClock, pNode->electTimerMS, pNode);