From 249a5895f120b13290a372a49bb4b499e749806f Mon Sep 17 00:00:00 2001 From: Istvan Kurucsai Date: Fri, 12 Jan 2018 15:26:20 +0100 Subject: [PATCH] malloc: Ensure that the consolidated fast chunk has a sane size. --- ChangeLog | 4 ++++ malloc/malloc.c | 6 ++++++ 2 files changed, 10 insertions(+) diff --git a/ChangeLog b/ChangeLog index 72aaf78cf23..fb280c1de58 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,7 @@ +2018-01-12 Istvan Kurucsai + + * malloc/malloc.c (malloc_consolidate): Add size check. + 2018-01-12 Florian Weimer * support/write_message.c (write_message): Preserve errno. diff --git a/malloc/malloc.c b/malloc/malloc.c index 48106f9bd45..f5aafd2c051 100644 --- a/malloc/malloc.c +++ b/malloc/malloc.c @@ -4431,6 +4431,12 @@ static void malloc_consolidate(mstate av) p = atomic_exchange_acq (fb, NULL); if (p != 0) { do { + { + unsigned int idx = fastbin_index (chunksize (p)); + if ((&fastbin (av, idx)) != fb) + malloc_printerr ("malloc_consolidate(): invalid chunk size"); + } + check_inuse_chunk(av, p); nextp = p->fd; -- 2.39.2