Jason Evans ecea0f6125 Fix junk filling of cached large objects.
Use the size argument to tcache_dalloc_large() to control the number of
bytes set to 0x5a when junk filling is enabled, rather than accessing a
non-existent arena bin.  This bug was capable of corrupting an
arbitrarily large memory region, depending on what followed the arena
data structure in memory (typically zeroed memory, another arena_t, or a
red-black tree node for a huge object).
2010-04-28 12:00:59 -07:00
2010-04-07 23:37:35 -07:00
Description
No description provided
13 MiB
Languages
C 87.4%
Perl 6.1%
M4 3.6%
Shell 1%
Makefile 0.9%
Other 1%