[PATCH] Avoid deadlock in malloc on backtrace
Carlos O'Donell
carlos@redhat.com
Fri Feb 27 16:33:00 GMT 2015
On 02/27/2015 09:20 AM, Szabolcs Nagy wrote:
> * Carlos O'Donell <carlos@redhat.com> [2015-02-26 17:18:04 -0500]:
>> (1) Delaying the abort is bad for security.
>>
>> Problem: The library should abort() immediately from a security perspective.
>>
>> Solution: Don't delay, call abort() immediately.
>
> i think from security pov immediate crash (__builtin_trap) is the right solution
>
> abort is complex (eg glibc tries to fflush stdio buffers)
I agree that __builtin_trap would be an option.
c.
More information about the Libc-alpha
mailing list