Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Access of memory past the end of a memory buffer #5

Closed
gaoethan opened this issue Nov 17, 2017 · 4 comments
Closed

Access of memory past the end of a memory buffer #5

gaoethan opened this issue Nov 17, 2017 · 4 comments
Labels
wontfix This will not be worked on

Comments

@gaoethan
Copy link

gaoethan commented Nov 17, 2017

In the API malloc_ex() free_ex() realloc_ex() taking address with &tlsf->fl_bitmap yields a singleton pointer and passing &tlsf->fl_bitmap to function set_bit which uses it as an array. This might corrupt or misinterpret adjacent memory locations. Out-of-bounds access that memory not owned by this buffer will be accessed, causing memory corruption or incorrect computations.

@gaoethan
Copy link
Author

This repo hasn't been developed for a long time, so here to mark this issue firstly. thanks.

@mikaelarguedas
Copy link
Member

tlsf is a third party package that we don't modify. Please report issues on the upstream repository.
Maybe a new version of this package has been released and, if so, we could consider importing a newer version

@mikaelarguedas
Copy link
Member

actually the upstream version got it's last commit 5 years ago so I think this will not change in the near future

@mikaelarguedas
Copy link
Member

closing as this won't be fixed in this repository

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
wontfix This will not be worked on
Projects
None yet
Development

No branches or pull requests

2 participants