Google Git
Sign in
llvm / scudo / 0c7fd4f92a1b31aa52459b542e98d7830f885eba
commit0c7fd4f92a1b31aa52459b542e98d7830f885eba[log] [tgz]
authorPeter Collingbourne <peter@pcc.me.uk>Wed May 12 15:29:41 2021 -0700
committerCopybara-Service <copybara-worker@google.com>Tue May 25 19:10:28 2021 -0700
tree12d6b14be8107982f47e230570541509904a6f4e
parentde36b1f443fdb7d969928d17a1a4dc7daa2462ab [diff]
scudo: Require fault address to be in bounds for UAF.

The bounds check that we previously had here was suitable for secondary
allocations but not for UAF on primary allocations, where it is likely
to result in false positives. Fix it by using a different bounds check
for UAF that requires the fault address to be in bounds.

Differential Revision: https://reviews.llvm.org/D102376

GitOrigin-RevId: 6732a5328cf03872d53827d3e0e283fcf16b551a
1 file changed
tree: 12d6b14be8107982f47e230570541509904a6f4e
  1. benchmarks/
  2. fuzz/
  3. include/
  4. tests/
  5. tools/
  6. allocator_config.h
  7. atomic_helpers.h
  8. bytemap.h
  9. checksum.cpp
  10. checksum.h
  11. chunk.h
  12. combined.h
  13. common.cpp
  14. common.h
  15. crc32_hw.cpp
  16. flags.cpp
  17. flags.h
  18. flags.inc
  19. flags_parser.cpp
  20. flags_parser.h
  21. fuchsia.cpp
  22. fuchsia.h
  23. internal_defs.h
  24. LICENSE.TXT
  25. linux.cpp
  26. linux.h
  27. list.h
  28. local_cache.h
  29. memtag.h
  30. mutex.h
  31. options.h
  32. platform.h
  33. primary32.h
  34. primary64.h
  35. quarantine.h
  36. release.cpp
  37. release.h
  38. report.cpp
  39. report.h
  40. secondary.h
  41. size_class_map.h
  42. stack_depot.h
  43. stats.h
  44. string_utils.cpp
  45. string_utils.h
  46. tsd.h
  47. tsd_exclusive.h
  48. tsd_shared.h
  49. vector.h
  50. wrappers_c.cpp
  51. wrappers_c.h
  52. wrappers_c.inc
  53. wrappers_c_bionic.cpp
  54. wrappers_c_checks.h
  55. wrappers_cpp.cpp