This is the mail archive of the glibc-bugs@sourceware.org mailing list for the glibc project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

[Bug locale/22390] Rare memory corruption in localedef related to malloc


https://sourceware.org/bugzilla/show_bug.cgi?id=22390

--- Comment #11 from Florian Weimer <fweimer at redhat dot com> ---
Created attachment 10574
  --> https://sourceware.org/bugzilla/attachment.cgi?id=10574&action=edit
reproducer.c

I'm attaching a simplified reproducer.  It needs to be run with an explicit
linker invocation, so that the heap is placed above ld.so.

The reproducer is still probabilistic.  The increment might be so large that
the second sbrk call fails.  But if the sbrk succeeds, the assignment at the
end will always segfault when running under a kernel which has the bug.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]