Google Git
Sign in
llvm / scudo / 7d0bb0fd876796ddca3d271f4c6699d8f7b10827
commit7d0bb0fd876796ddca3d271f4c6699d8f7b10827[log] [tgz]
authorChristopher Ferris <cferris1000@users.noreply.github.com>Thu Mar 28 17:35:46 2024 -0700
committerCopybara-Service <copybara-worker@google.com>Thu Mar 28 17:41:59 2024 -0700
treee5dec3c480398c46a0935dab4c98ca94658afe09
parent31a5ae7d3fb9f238fcf62074731b69915e1d2e64 [diff]
[scudo] Fix stack depot validation. (#87024)

In the StackDepot::isValid function, there is work to validate the
TabMask variable. Unfortunately, if TabMask is set to the maximum
allowed value, TabSize = TabMask + 1 becomes zero and validation passes.

Disallow that case to prevent invalid reads into the Tab structure.

GitOrigin-RevId: 7a87902684b5e15644f037401e88b1f0c2c5fc6f
1 file changed
tree: e5dec3c480398c46a0935dab4c98ca94658afe09
  1. benchmarks/
  2. fuzz/
  3. include/
  4. tests/
  5. tools/
  6. allocator_common.h
  7. allocator_config.def
  8. allocator_config.h
  9. allocator_config_wrapper.h
  10. atomic_helpers.h
  11. bytemap.h
  12. checksum.cpp
  13. checksum.h
  14. chunk.h
  15. combined.h
  16. common.cpp
  17. common.h
  18. condition_variable.h
  19. condition_variable_base.h
  20. condition_variable_linux.cpp
  21. condition_variable_linux.h
  22. crc32_hw.cpp
  23. flags.cpp
  24. flags.h
  25. flags.inc
  26. flags_parser.cpp
  27. flags_parser.h
  28. fuchsia.cpp
  29. fuchsia.h
  30. internal_defs.h
  31. LICENSE.TXT
  32. linux.cpp
  33. linux.h
  34. list.h
  35. local_cache.h
  36. mem_map.cpp
  37. mem_map.h
  38. mem_map_base.h
  39. mem_map_fuchsia.cpp
  40. mem_map_fuchsia.h
  41. mem_map_linux.cpp
  42. mem_map_linux.h
  43. memtag.h
  44. mutex.h
  45. options.h
  46. platform.h
  47. primary32.h
  48. primary64.h
  49. quarantine.h
  50. release.cpp
  51. release.h
  52. report.cpp
  53. report.h
  54. report_linux.cpp
  55. report_linux.h
  56. secondary.h
  57. size_class_map.h
  58. stack_depot.h
  59. stats.h
  60. string_utils.cpp
  61. string_utils.h
  62. thread_annotations.h
  63. timing.cpp
  64. timing.h
  65. trusty.cpp
  66. trusty.h
  67. tsd.h
  68. tsd_exclusive.h
  69. tsd_shared.h
  70. vector.h
  71. wrappers_c.cpp
  72. wrappers_c.h
  73. wrappers_c.inc
  74. wrappers_c_bionic.cpp
  75. wrappers_c_checks.h
  76. wrappers_cpp.cpp