public inbox for glibc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug libc/3313] New: madvise(M_MXFAST,0) sets up a crash
@ 2006-10-06 0:36 pasky at suse dot cz
2006-10-13 20:54 ` [Bug libc/3313] " drepper at redhat dot com
0 siblings, 1 reply; 2+ messages in thread
From: pasky at suse dot cz @ 2006-10-06 0:36 UTC (permalink / raw)
To: glibc-bugs
When a program calls madvise(M_MXFAST, 0), it will crash the next time it tries
to do some memory allocation or get into an infinite loop when it remadvises
M_MXFAST to some other value. The problem probably stems from the handling of
the first two "unindexable" bins (although I'm not sure right now how are they
unindexable) - madvise(M_MXFAST, 0) will set the max_fast to SMALLBIN_WIDTH but
fastbin_index(SMALLBIN_WIDTH) == -1, which ain't any good when you use that as
an index to the buckets array.
--
Summary: madvise(M_MXFAST,0) sets up a crash
Product: glibc
Version: unspecified
Status: NEW
Severity: normal
Priority: P2
Component: libc
AssignedTo: drepper at redhat dot com
ReportedBy: pasky at suse dot cz
CC: glibc-bugs at sources dot redhat dot com
http://sourceware.org/bugzilla/show_bug.cgi?id=3313
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
^ permalink raw reply [flat|nested] 2+ messages in thread
* [Bug libc/3313] madvise(M_MXFAST,0) sets up a crash
2006-10-06 0:36 [Bug libc/3313] New: madvise(M_MXFAST,0) sets up a crash pasky at suse dot cz
@ 2006-10-13 20:54 ` drepper at redhat dot com
0 siblings, 0 replies; 2+ messages in thread
From: drepper at redhat dot com @ 2006-10-13 20:54 UTC (permalink / raw)
To: glibc-bugs
------- Additional Comments From drepper at redhat dot com 2006-10-13 20:53 -------
I couldn't reproduce the problem but there were two things clearly wrong. Both
were not introduced by the renumbering of the fast bins, they existed before.
But the renumbering exposed the problems.
The CVS code should be fix. Try it and report back.
--
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED
http://sourceware.org/bugzilla/show_bug.cgi?id=3313
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2006-10-13 20:54 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2006-10-06 0:36 [Bug libc/3313] New: madvise(M_MXFAST,0) sets up a crash pasky at suse dot cz
2006-10-13 20:54 ` [Bug libc/3313] " drepper at redhat dot com
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).