[PATCH] malloc/malloc.c: Mitigate null-byte overflow attacks

DJ Delorie dj@redhat.com
Fri Oct 27 03:27:00 GMT 2017


Sorry, I'm not getting my idea across.  Let me try again.

I'm thinking, something that tests a size *before* we consider it in the
context of a chunk, such as this one:

  https://www.sourceware.org/ml/libc-alpha/2017-10/msg01202.html

One might also consider certain combinations of the three low order
bits, like setting both the A (arena) and M (mmap'd) bits at the same
time.

Even if we had such a test, though, we'd still need to carefully
consider all the places we'd use it - comparing possible utility vs
performance degredation.

But please don't consider this a requirement for any pending patches, I
was just thinking out loud ;-)



More information about the Libc-alpha mailing list