diff options
author | Jason Evans <je@fb.com> | 2013-01-30 23:03:11 (GMT) |
---|---|---|
committer | Jason Evans <je@fb.com> | 2013-01-31 22:23:48 (GMT) |
commit | bbe29d374d0fa5f4684621f16c099294e56c26ef (patch) | |
tree | 4ddaf133e68cb14e25127afb7dfd41a5c8562b34 /ChangeLog | |
parent | 83789f45307379e096c4e8be81d9e9a51e3f5a4a (diff) | |
download | jemalloc-bbe29d374d0fa5f4684621f16c099294e56c26ef.zip jemalloc-bbe29d374d0fa5f4684621f16c099294e56c26ef.tar.gz jemalloc-bbe29d374d0fa5f4684621f16c099294e56c26ef.tar.bz2 |
Fix potential TLS-related memory corruption.
Avoid writing to uninitialized TLS as a side effect of deallocation.
Initializing TLS during deallocation is unsafe because it is possible
that a thread never did any allocation, and that TLS has already been
deallocated by the threads library, resulting in write-after-free
corruption. These fixes affect prof_tdata and quarantine; all other
uses of TLS are already safe, whether intentionally (as for tcache) or
unintentionally (as for arenas).
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -6,6 +6,13 @@ found in the git revision history: http://www.canonware.com/cgi-bin/gitweb.cgi?p=jemalloc.git git://canonware.com/jemalloc.git +* 3.x.x (XXX Not yet released) + + Bug fixes: + - Fix TLS-related memory corruption that could occur during thread exit if the + thread never allocated memory. Only the quarantine and prof facilities were + susceptible. + * 3.3.0 (January 23, 2013) This version includes a few minor performance improvements in addition to the |