DMP: Fix the number of buckets.

third_party/tcmalloc/chromium/src/heap-profile-table.cc

 // Copyright (c) 2006, Google Inc.
 // All rights reserved.
 // 
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 // 
 //     * Redistributions of source code must retain the above copyright
 // notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
@@ skipping 283 matching lines @@
     buflen += printed;
   }
   printed = snprintf(buf + buflen, bufsize - buflen, "\n");
   if (printed < 0 || printed >= bufsize - buflen) return buflen;
   buflen += printed;
   return buflen;
 }
 
 HeapProfileTable::Bucket**
 HeapProfileTable::MakeSortedBucketList() const {
+  // We allocate memory for (num_buckets_ + 1) buckets
+  // because this allocations itself could create a new bucket.
+  // There is no harm even if it doesn't create a new bucket.
   Bucket** list =
-    reinterpret_cast<Bucket**>(alloc_(sizeof(Bucket) * num_buckets_));
+    reinterpret_cast<Bucket**>(alloc_(sizeof(Bucket) * (num_buckets_ + 1)));
 
   int n = 0;
   for (int b = 0; b < kHashTableSize; b++) {
     for (Bucket* x = table_[b]; x != 0; x = x->next) {
       list[n++] = x;
     }
   }
   RAW_DCHECK(n == num_buckets_, "");
 
   sort(list, list + num_buckets_, ByAllocatedSpace);
@@ skipping 276 matching lines @@
                                               char* unused) {
   // Perhaps also log the allocation stack trace (unsymbolized)
   // on this line in case somebody finds it useful.
   RAW_LOG(ERROR, "leaked %"PRIuS" byte object %p", v->bytes, ptr);
 }
 
 void HeapProfileTable::Snapshot::ReportIndividualObjects() {
   char unused;
   map_.Iterate(ReportObject, &unused);
 }