W. Hashimoto 0e00b35704 malloc: Detect infinite-loop in _int_free when freeing tcache [BZ#27052]
If linked-list of tcache contains a loop, it invokes infinite
loop in _int_free when freeing tcache. The PoC which invokes
such infinite loop is on the Bugzilla(#27052). This loop
should terminate when the loop exceeds mp_.tcache_count and
the program should abort. The affected glibc version is
2.29 or later.

Reviewed-by: DJ Delorie <dj@redhat.com>
2020-12-11 16:59:10 -05:00
..
2014-01-02 09:40:10 +01:00
2020-09-17 18:49:30 -04:00
2020-04-03 07:20:56 -04:00
2007-12-16 22:57:57 +00:00
2020-09-17 18:49:30 -04:00