[patch] Correct range checking in mallopt/mxfast/tcache [BZ #25194]

Carlos O'Donell codonell@redhat.com
Wed Dec 4 04:51:00 GMT 2019


On 12/3/19 11:47 PM, DJ Delorie wrote:
> "Carlos O'Donell" <codonell@redhat.com> writes:
>> Does this allow mallopt to accept an invalid large negative 
>> value but after wrapping be treated as less than MAX_TCACHE_SIZE
>> and thus be accepted instead of rejected?
> 
> Only if sizeof(int) > sizeof(size_t), which for our targets never
> happens.  Negative values passed to mallopt will now result in failure,
> because they'll map to positive size_t larger than MAX_TCACHE_SIZE.

> Plus MAX_TCACHE_SIZE is "very small"
 
I would accept:

* Proper range checking in mallopt.
* Documentation in a comment that this is safe with an example.

-- 
Cheers,
Carlos.



More information about the Libc-alpha mailing list