diff --git a/src/wal/src/walWrite.c b/src/wal/src/walWrite.c
index 2253ad5c33906714352ecdcd0a916dbcc307a82f..e67127d6e478332889bec3ac565caff62d475b37 100644
--- a/src/wal/src/walWrite.c
+++ b/src/wal/src/walWrite.c
@@ -297,16 +297,14 @@ static int32_t walRestoreWalFile(SWal *pWal, void *pVnode, FWalWrite writeFp, ch
       }
     }
 
-    if (pHead->len > size - sizeof(SWalHead)) {
-      size = sizeof(SWalHead) + pHead->len;
-      buffer = realloc(buffer, size);
-      if (buffer == NULL) {
-        wError("vgId:%d, file:%s, failed to open for restore since %s", pWal->vgId, name, strerror(errno));
-        code = TAOS_SYSTEM_ERROR(errno);
+    if (pHead->len < 0 || pHead->len > size - sizeof(SWalHead)) {
+      wError("vgId:%d, file:%s, wal head len out of range, hver:%" PRIu64 " len:%d offset:%" PRId64, pWal->vgId, name,
+             pHead->version, pHead->len, offset);
+      code = walSkipCorruptedRecord(pWal, pHead, tfd, &offset);
+      if (code != TSDB_CODE_SUCCESS) {
+        walFtruncate(pWal, tfd, offset);
         break;
       }
-
-      pHead = buffer;
     }
 
     ret = tfRead(tfd, pHead->cont, pHead->len);
diff --git a/src/wal/test/waltest.c b/src/wal/test/waltest.c
index 7a473ed18c958afa8be3c5b94b04d2fd548a56fd..9a52a2ca833e671fe96acf6800f15e44fba292e3 100644
--- a/src/wal/test/waltest.c
+++ b/src/wal/test/waltest.c
@@ -76,7 +76,7 @@ int main(int argc, char *argv[]) {
 
   taosInitLog("wal.log", 100000, 10);
 
-  SWalCfg walCfg;
+  SWalCfg walCfg = {0};
   walCfg.walLevel = level;
   walCfg.keep = keep;