glibc/malloc
Arjun Shankar 34697694e8 Fix integer overflow in malloc when tcache is enabled [BZ #22375]
When the per-thread cache is enabled, __libc_malloc uses request2size (which
does not perform an overflow check) to calculate the chunk size from the
requested allocation size. This leads to an integer overflow causing malloc
to incorrectly return the last successfully allocated block when called with
a very large size argument (close to SIZE_MAX).

This commit uses checked_request2size instead, removing the overflow.
2017-11-30 13:42:53 +01:00
..
alloc_buffer_alloc_array.c Implement allocation buffers for internal use 2017-06-21 22:43:57 +02:00
alloc_buffer_allocate.c Implement allocation buffers for internal use 2017-06-21 22:43:57 +02:00
alloc_buffer_copy_bytes.c Implement allocation buffers for internal use 2017-06-21 22:43:57 +02:00
alloc_buffer_copy_string.c Implement allocation buffers for internal use 2017-06-21 22:43:57 +02:00
alloc_buffer_create_failure.c Implement allocation buffers for internal use 2017-06-21 22:43:57 +02:00
arena.c malloc: Call tcache destructor in arena_thread_freeres 2017-11-23 14:47:31 +01:00
Depend
dynarray_at_failure.c
dynarray_emplace_enlarge.c __libc_dynarray_emplace_enlarge: Add missing else 2017-09-06 16:03:28 +02:00
dynarray_finalize.c
dynarray_resize_clear.c
dynarray_resize.c dynarray: Set errno on overflow-induced allocation failure 2017-08-30 20:10:56 +02:00
dynarray-skeleton.c
dynarray.h
hooks.c Silence -O3 -Wall warning in malloc/hooks.c with GCC 7 [BZ #22052] 2017-10-15 08:16:37 -07:00
Makefile malloc: Add missing arena lock in malloc_info [BZ #22408] 2017-11-15 11:39:01 +01:00
malloc-hooks.h
malloc-internal.h malloc: Remove the internal_function attribute 2017-08-31 15:59:06 +02:00
malloc.c Fix integer overflow in malloc when tcache is enabled [BZ #22375] 2017-11-30 13:42:53 +01:00
malloc.h
mallocbug.c
mcheck-init.c malloc: Use compat_symbol_reference in libmcheck [BZ #22050] 2017-10-16 20:52:34 +02:00
mcheck.c Do not use __ptr_t. 2017-08-08 17:14:49 +00:00
mcheck.h
memusage.c
memusage.sh
memusagestat.c
morecore.c
mtrace.c Mark __dso_handle as hidden [BZ #18822] 2017-09-26 16:53:44 -07:00
mtrace.pl
obstack.c
obstack.h
reallocarray.c
scratch_buffer_grow_preserve.c scratch_buffer: use union for internal buffer 2017-09-25 18:04:22 -07:00
scratch_buffer_grow.c Sync scratch_buffer with gnulib 2017-09-08 15:51:34 +02:00
scratch_buffer_set_array_size.c Sync scratch_buffer with gnulib 2017-09-08 15:51:34 +02:00
set-freeres.c
thread-freeres.c
tst-alloc_buffer.c Prevent an implicit int promotion in malloc/tst-alloc_buffer.c 2017-06-26 09:56:26 -03:00
tst-calloc.c
tst-dynarray-at-fail.c
tst-dynarray-fail.c
tst-dynarray-shared.h
tst-dynarray.c dynarray: Set errno on overflow-induced allocation failure 2017-08-30 20:10:56 +02:00
tst-interpose-aux-nothread.c
tst-interpose-aux-thread.c
tst-interpose-aux.c
tst-interpose-aux.h
tst-interpose-nothread.c
tst-interpose-skeleton.c
tst-interpose-static-nothread.c
tst-interpose-static-thread.c
tst-interpose-thread.c
tst-malloc_info.c malloc: Add missing arena lock in malloc_info [BZ #22408] 2017-11-15 11:39:01 +01:00
tst-malloc-backtrace.c
tst-malloc-fork-deadlock.c
tst-malloc-tcache-leak.c malloc: Fix tcache leak after thread destruction [BZ #22111] 2017-10-06 09:31:52 -07:00
tst-malloc-thread-exit.c
tst-malloc-thread-fail.c
tst-malloc-usable-static-tunables.c
tst-malloc-usable-static.c
tst-malloc-usable-tunables.c
tst-malloc-usable.c
tst-malloc.c
tst-mallocfork2.c
tst-mallocfork.c Prefer https for Sourceware links 2017-11-16 11:49:26 +05:30
tst-mallocstate.c Fix tests that are testing obsoleted functionality 2017-09-05 12:24:00 -07:00
tst-mallopt.c
tst-mcheck.c
tst-memalign.c
tst-mtrace.c
tst-mtrace.sh
tst-obstack.c
tst-posix_memalign.c
tst-pvalloc.c
tst-realloc.c
tst-reallocarray.c
tst-scratch_buffer.c scratch_buffer: use union for internal buffer 2017-09-25 18:04:22 -07:00
tst-trim1.c
tst-valloc.c
Versions Implement allocation buffers for internal use 2017-06-21 22:43:57 +02:00