From: Francois Goichon <fgoichon@google.com>
Date: Wed, 14 Mar 2018 20:25:57 +0000 (-0400)
Subject: malloc: harden removal from unsorted list
X-Git-Tag: glibc-2.28~477
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=bdc3009b8ff0effdbbfb05eb6b10966753cbf9b8;p=thirdparty%2Fglibc.git

malloc: harden removal from unsorted list

* malloc/malloc.c (_int_malloc): Added check before removing from
unsorted list.
---

diff --git a/malloc/malloc.c b/malloc/malloc.c
index e229181c5e2..96149549758 100644
--- a/malloc/malloc.c
+++ b/malloc/malloc.c
@@ -3775,6 +3775,8 @@ _int_malloc (mstate av, size_t bytes)
             }
 
           /* remove from unsorted list */
+          if (__glibc_unlikely (bck->fd != victim))
+            malloc_printerr ("malloc(): corrupted unsorted chunks 3");
           unsorted_chunks (av)->bk = bck;
           bck->fd = unsorted_chunks (av);