[PATCH] malloc/malloc.c: Mitigate null-byte overflow attacks
Moritz Eckert
m.eckert@cs.ucsb.edu
Fri Oct 27 03:38:00 GMT 2017
>
> Sorry, I'm not getting my idea across. Let me try again.
>
> I'm thinking, something that tests a size *before* we consider it in the
> context of a chunk, such as this one:
>
> https://www.sourceware.org/ml/libc-alpha/2017-10/msg01202.html
>
> One might also consider certain combinations of the three low order
> bits, like setting both the A (arena) and M (mmap'd) bits at the same
> time.
>
> Even if we had such a test, though, we'd still need to carefully
> consider all the places we'd use it - comparing possible utility vs
> performance degredation.
>
Ah I see. That's a good check btw:-)
> But please don't consider this a requirement for any pending patches, I
> was just thinking out loud ;-)
>
So for my current patch idea, would you prefer it with or without a
macro and keeping the check inside unlink or not?
More information about the Libc-alpha
mailing list