[PATCH] malloc: tcache: detect infinite-loop in _int_free when freeing tcache [BZ#27052]

[DJ Delorie]

"W. Hashimoto via Libc-alpha" <libc-alpha@sourceware.org> writes:
> If linked-list of tcache contains a loop, it invokes infinite
> loop in _int_free when freeing tcache. The PoC which invokes
> such infinite loop is on the Bugzilla(#27052). This loop
> should terminate when the loop exceeds mp_.tcache_count and
> the program should abort. The affected glibc version is
> 2.29 or later.

LGTM.  Thanks!  Committed.

Reviewed-by: DJ Delorie <dj@redhat.com>