about summary refs log tree commit diff
path: root/stdlib/srand48.c
diff options
context:
space:
mode:
authorSzabolcs Nagy <szabolcs.nagy@arm.com>2023-04-04 16:39:34 +0100
committerSzabolcs Nagy <szabolcs.nagy@arm.com>2023-04-05 15:29:59 +0100
commit33cb9de5cba0e3b428a2bab4bd8368bf55806430 (patch)
tree63884e6c4509f00baf13066ac12efcd6cf29b85c /stdlib/srand48.c
parent47e61ba7720c1c646077318e079dcb75224b1001 (diff)
downloadglibc-arm/morello/main.tar.gz
glibc-arm/morello/main.tar.xz
glibc-arm/morello/main.zip
cheri: malloc: exact capability check in free/realloc arm/morello/main
Capability narrowing uses a lookup table from an address to the
internally used wide capability. Keep the narrow capability in the
table instead of just the address and check it. This allows free
and realloc to check their input and only accept capabilities
exactly matching what was returned by malloc.

When a user adds restrictions on top of malloc returned capabilities
(e.g. narrower bounds), realloc could bypass those restrictions when
it simply looked up the internal wide capability for the address.
Diffstat (limited to 'stdlib/srand48.c')
0 files changed, 0 insertions, 0 deletions