cvs commit: src/sys/kern kern_malloc.c
Harald Schmalzbauer
harry at schmalzbauer.de
Thu Jan 12 04:26:31 PST 2006
Am Mittwoch, 28. Dezember 2005 02:53 CEST schrieb Pawel Jakub Dawidek:
> pjd 2005-12-28 01:53:13 UTC
>
> FreeBSD src repository
>
> Modified files:
> sys/kern kern_malloc.c
> Log:
> In realloc(9), determine size of the original block based on
> UMA_SLAB_MALLOC flag.
> In some circumstances (I observed it when I was doing a lot of
> reallocs) UMA_SLAB_MALLOC can be set even if us_keg != NULL.
>
> If this is the case we have wonderful, silent data corruption, because
> less data is copied to the newly allocated region than should be.
>
> I'm not sure when this bug was introduced, it could be there
> undetected for years now, as we don't have a lot of realloc(9) consumers
> and it was hard to reproduce it...
> ...but what I know for sure, is that I don't want to know who
> introduce the bug:) It took me two/three days to track it down (of
> course most of the time I was looking for the bug in my own code).
>
> Revision Changes Path
> 1.150 +1 -1 src/sys/kern/kern_malloc.c
Thanks for your work, I'm using it in RELENG_6 from day one without any
impact, so perhaps it's safe to MFC?
-Harry
> _______________________________________________
> cvs-src at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/cvs-src
> To unsubscribe, send any mail to "cvs-src-unsubscribe at freebsd.org"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/cvs-src/attachments/20060112/7613a82c/attachment.bin
More information about the cvs-src
mailing list