RepoMirrors/musl
1
0
Fork 0
mirror of git://git.musl-libc.org/musl synced 2024-12-20 05:41:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

comment __malloc_donate overflow logic

Browse Source
This commit is contained in:
Rich Felker 2018-04-17 15:18:49 -04:00
parent ce7ae11acf
commit 14032c30e2
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/malloc/malloc.c
View File

@ -563,6 +563,9 @@ void __malloc_donate(char *start, char *end)
size_t align_start_up = (SIZE_ALIGN-1) & (-(uintptr_t)start - OVERHEAD);
size_t align_end_down = (SIZE_ALIGN-1) & (uintptr_t)end;
/* Getting past this condition ensures that the padding for alignment
* and header overhead will not overflow and will leave a nonzero
* multiple of SIZE_ALIGN bytes between start and end. */
if (end - start <= OVERHEAD + align_start_up + align_end_down)
return;
start += align_start_up + OVERHEAD;