Google Git
Sign in
llvm / scudo / 110fcb9f33899e9c13fb4ed5cbf983d0ebeafb26
commit110fcb9f33899e9c13fb4ed5cbf983d0ebeafb26[log] [tgz]
authorChristopher Ferris <cferris1000@users.noreply.github.com>Tue Oct 15 17:14:50 2024 -0700
committerCopybara-Service <copybara-worker@google.com>Tue Oct 15 17:20:46 2024 -0700
treef0fc4fe3a543234cc836fb6f29d8c18b0d34fff3
parent7bb0ac6b70ee57acf49fb506910a41a7cd4774bd [diff]
[scudo] Double frees result in chunk state error (#110345)

Fixes bug where a device that supports tagged pointers doesn't use
the tagged pointer when computing the checksum.

Add tests to verify that double frees result in chunk state error
not corrupted header errors.

GitOrigin-RevId: ed0fd13783a68af6033b2c489eb830af0726856c
2 files changed
tree: f0fc4fe3a543234cc836fb6f29d8c18b0d34fff3
  1. fuzz/
  2. include/
  3. tests/
  4. tools/
  5. allocator_common.h
  6. allocator_config.def
  7. allocator_config.h
  8. allocator_config_wrapper.h
  9. atomic_helpers.h
  10. bytemap.h
  11. checksum.cpp
  12. checksum.h
  13. chunk.h
  14. combined.h
  15. common.cpp
  16. common.h
  17. condition_variable.h
  18. condition_variable_base.h
  19. condition_variable_linux.cpp
  20. condition_variable_linux.h
  21. crc32_hw.cpp
  22. flags.cpp
  23. flags.h
  24. flags.inc
  25. flags_parser.cpp
  26. flags_parser.h
  27. fuchsia.cpp
  28. fuchsia.h
  29. internal_defs.h
  30. LICENSE.TXT
  31. linux.cpp
  32. linux.h
  33. list.h
  34. local_cache.h
  35. mem_map.cpp
  36. mem_map.h
  37. mem_map_base.h
  38. mem_map_fuchsia.cpp
  39. mem_map_fuchsia.h
  40. mem_map_linux.cpp
  41. mem_map_linux.h
  42. memtag.h
  43. mutex.h
  44. options.h
  45. platform.h
  46. primary32.h
  47. primary64.h
  48. quarantine.h
  49. release.cpp
  50. release.h
  51. report.cpp
  52. report.h
  53. report_linux.cpp
  54. report_linux.h
  55. secondary.h
  56. size_class_map.h
  57. stack_depot.h
  58. stats.h
  59. string_utils.cpp
  60. string_utils.h
  61. thread_annotations.h
  62. timing.cpp
  63. timing.h
  64. trusty.cpp
  65. trusty.h
  66. tsd.h
  67. tsd_exclusive.h
  68. tsd_shared.h
  69. vector.h
  70. wrappers_c.cpp
  71. wrappers_c.h
  72. wrappers_c.inc
  73. wrappers_c_bionic.cpp
  74. wrappers_c_checks.h
  75. wrappers_cpp.cpp