Bug 771 - possible deadlock on double-free logging
Summary: possible deadlock on double-free logging
Status: RESOLVED DUPLICATE of bug 770
Alias: None
Product: glibc
Classification: Unclassified
Component: libc (show other bugs)
Version: 2.3.4
: P2 normal
Target Milestone: ---
Assignee: GOTO Masanori
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-02-26 21:35 UTC by Jakub Bogusz
Modified: 2018-04-20 13:30 UTC (History)
1 user (show)

See Also:
Host:
Target:
Build:
Last reconfirmed:
Project(s) to access:
ssh public key:
fweimer: security-


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jakub Bogusz 2005-02-26 21:35:14 UTC
_int_free() (malloc/malloc.c), which is called from free() with arena mutex
locked, checks and eventually prints/logs error message.
So if malloc_printerr() handling do some malloc()/free() on the same memory
arena, deadlock can occur.
vsyslog() can call free() during tz manipulation.

Yes, this deadlock is triggered by buggy code.
But it's all inside libc, not caused by actual memory corruption.
Comment 1 Jakub Bogusz 2005-02-26 21:37:47 UTC
Oops, refreshed wrong page...

*** This bug has been marked as a duplicate of 770 ***