diff options
| author | Richard Weinberger <[email protected]> | 2024-08-02 12:08:45 +0200 |
|---|---|---|
| committer | Tom Rini <[email protected]> | 2024-08-15 16:14:36 -0600 |
| commit | 0a10b49206a29b4aa2f80233a3e53ca0466bb0b3 (patch) | |
| tree | 6ea44a94335c94ccf6a0cebd2eea06680b165e6e /include/linux/string.h | |
| parent | 8642b2178d2c4002c99a0b69a845a48f2ae2706f (diff) | |
dlmalloc: Fix integer overflow in sbrk()
Make sure that the new break is within mem_malloc_start
and mem_malloc_end before making progress.
ulong new = old + increment; can overflow for extremely large
increment values and memset() can get wrongly called.
Signed-off-by: Richard Weinberger <[email protected]>
Reviewed-by: Simon Glass <[email protected]>
Diffstat (limited to 'include/linux/string.h')
0 files changed, 0 insertions, 0 deletions