[all-commits] [llvm/llvm-project] 6732a5: scudo: Require fault address to be in bounds for UAF.

pcc via All-commits all-commits at lists.llvm.org
Wed May 12 18:03:00 PDT 2021


  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: 6732a5328cf03872d53827d3e0e283fcf16b551a
      https://github.com/llvm/llvm-project/commit/6732a5328cf03872d53827d3e0e283fcf16b551a
  Author: Peter Collingbourne <peter at pcc.me.uk>
  Date:   2021-05-12 (Wed, 12 May 2021)

  Changed paths:
    M compiler-rt/lib/scudo/standalone/combined.h

  Log Message:
  -----------
  scudo: Require fault address to be in bounds for UAF.

The bounds check that we previously had here was suitable for secondary
allocations but not for UAF on primary allocations, where it is likely
to result in false positives. Fix it by using a different bounds check
for UAF that requires the fault address to be in bounds.

Differential Revision: https://reviews.llvm.org/D102376




More information about the All-commits mailing list