about summary refs log tree commit diff
path: root/src/malloc/lite_malloc.c
diff options
context:
space:
mode:
authorRich Felker <dalias@aerifal.cx>2020-06-16 00:34:12 -0400
committerRich Felker <dalias@aerifal.cx>2020-06-16 00:46:09 -0400
commitcb5babdc8d624a3e3e7bea0b4e28a677a2f2fc46 (patch)
treed54983469024aa7300e221d182bd4dfadff71431 /src/malloc/lite_malloc.c
parent4bd22b8f3e6ffa8f43ea73e7bb6276aafb5a7743 (diff)
downloadmusl-cb5babdc8d624a3e3e7bea0b4e28a677a2f2fc46.tar.gz
musl-cb5babdc8d624a3e3e7bea0b4e28a677a2f2fc46.tar.xz
musl-cb5babdc8d624a3e3e7bea0b4e28a677a2f2fc46.zip
fix memset overflow in oldmalloc race fix overhaul
commit 3e16313f8fe2ed143ae0267fd79d63014c24779f introduced this bug by
making the copy case reachable with n (new size) smaller than n0
(original size). this was left as the only way of shrinking an
allocation because it reduces fragmentation if a free chunk of the
appropriate size is available. when that's not the case, another
approach may be better, but any such improvement would be independent
of fixing this bug.
Diffstat (limited to 'src/malloc/lite_malloc.c')
0 files changed, 0 insertions, 0 deletions