[PATCH] Avoid deadlock in malloc on backtrace

Carlos O'Donell carlos@redhat.com
Fri Feb 27 16:33:00 GMT 2015


On 02/27/2015 09:20 AM, Szabolcs Nagy wrote:
> * Carlos O'Donell <carlos@redhat.com> [2015-02-26 17:18:04 -0500]:
>> (1) Delaying the abort is bad for security.
>>
>> Problem: The library should abort() immediately from a security perspective.
>>
>> Solution: Don't delay, call abort() immediately.
> 
> i think from security pov immediate crash (__builtin_trap) is the right solution
> 
> abort is complex (eg glibc tries to fflush stdio buffers)

I agree that __builtin_trap would be an option.

c.



More information about the Libc-alpha mailing list