[all-commits] [llvm/llvm-project] 956713: scudo: Check for UAF in ring buffer before OOB in ...

[pcc via All-commits]

  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: 9567131d03650bbaa82251f173bd6959e04d471d
      https://github.com/llvm/llvm-project/commit/9567131d03650bbaa82251f173bd6959e04d471d
  Author: Peter Collingbourne <peter at pcc.me.uk>
  Date:   2021-05-13 (Thu, 13 May 2021)

  Changed paths:
    M compiler-rt/lib/scudo/standalone/combined.h

  Log Message:
  -----------
  scudo: Check for UAF in ring buffer before OOB in more distant blocks.

It's more likely that we have a UAF than an OOB in blocks that are
more than 1 block away from the fault address, so the UAF should
appear first in the error report.

Differential Revision: https://reviews.llvm.org/D102379


  Commit: f79929aceae966f9419cfc00c275e5e60bd0ee54
      https://github.com/llvm/llvm-project/commit/f79929aceae966f9419cfc00c275e5e60bd0ee54
  Author: Peter Collingbourne <peter at pcc.me.uk>
  Date:   2021-05-13 (Thu, 13 May 2021)

  Changed paths:
    M compiler-rt/lib/scudo/standalone/combined.h

  Log Message:
  -----------
  scudo: Fix MTE error reporting for zero-sized allocations.

With zero-sized allocations we don't actually end up storing the
address tag to the memory tag space, so store it in the first byte of
the chunk instead so that we can find it later in getInlineErrorInfo().

Differential Revision: https://reviews.llvm.org/D102442


Compare: https://github.com/llvm/llvm-project/compare/ab6a609d9611...f79929aceae9