public inbox for glibc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug dynamic-link/24773] dlerror in an secondary namespace does not use the right free implementation
       [not found] <bug-24773-131@http.sourceware.org/bugzilla/>
@ 2021-04-21 19:40 ` fweimer at redhat dot com
  0 siblings, 0 replies; only message in thread
From: fweimer at redhat dot com @ 2021-04-21 19:40 UTC (permalink / raw)
  To: glibc-bugs

https://sourceware.org/bugzilla/show_bug.cgi?id=24773

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |2.34
             Status|NEW                         |RESOLVED
           Assignee|unassigned at sourceware dot org   |fweimer at redhat dot com
         Resolution|---                         |FIXED
                 CC|                            |fweimer at redhat dot com
           See Also|                            |https://sourceware.org/bugz
                   |                            |illa/show_bug.cgi?id=24776

--- Comment #3 from Florian Weimer <fweimer at redhat dot com> ---
Fixed for glibc 2.34 via:

commit fada9018199c21c469ff0e731ef75c6020074ac9
Author: Florian Weimer <fweimer@redhat.com>
Date:   Wed Apr 21 19:49:51 2021 +0200

    dlfcn: dlerror needs to call free from the base namespace [BZ #24773]

    Calling free directly may end up freeing a pointer allocated by the
    dynamic loader using malloc from libc.so in the base namespace using
    the allocator from libc.so in a secondary namespace, which results in
    crashes.

    This commit redirects the free call through GLRO and the dynamic
    linker, to reach the correct namespace.  It also cleans up the dlerror
    handling along the way, so that pthread_setspecific is no longer
    needed (which avoids triggering bug 24774).

The reference to the bug is incorrect, it should be bug 24776.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2021-04-21 19:40 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <bug-24773-131@http.sourceware.org/bugzilla/>
2021-04-21 19:40 ` [Bug dynamic-link/24773] dlerror in an secondary namespace does not use the right free implementation fweimer at redhat dot com

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).