diff options
| author | Florian Weimer <fweimer@redhat.com> | 2018-11-26 20:06:37 +0100 |
|---|---|---|
| committer | Florian Weimer <fweimer@redhat.com> | 2018-11-26 20:06:37 +0100 |
| commit | affec03b713c82c43a5b025dddc21bde3334f41e (patch) | |
| tree | 3026478268be021b7ba6d0d2650ce511cbf588b4 /support/support_openpty.c | |
| parent | 8ae74eadb60eb36424e4605939cef5fc966724be (diff) | |
| download | glibc-affec03b713c82c43a5b025dddc21bde3334f41e.tar.gz glibc-affec03b713c82c43a5b025dddc21bde3334f41e.tar.xz glibc-affec03b713c82c43a5b025dddc21bde3334f41e.zip | |
malloc: tcache: Validate tc_idx before checking for double-frees [BZ #23907]
The previous check could read beyond the end of the tcache entry array. If the e->key == tcache cookie check happened to pass, this would result in crashes.
Diffstat (limited to 'support/support_openpty.c')
0 files changed, 0 insertions, 0 deletions