From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: by sourceware.org (Postfix, from userid 48) id C51F83858402; Wed, 27 Oct 2021 21:03:41 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org C51F83858402 From: "rjones at redhat dot com" To: glibc-bugs@sourceware.org Subject: [Bug malloc/28506] New: malloc-check + malloc_usage_size(NULL) causes segfault Date: Wed, 27 Oct 2021 21:03:41 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: glibc X-Bugzilla-Component: malloc X-Bugzilla-Version: 2.35 X-Bugzilla-Keywords: X-Bugzilla-Severity: normal X-Bugzilla-Who: rjones at redhat dot com X-Bugzilla-Status: NEW X-Bugzilla-Resolution: X-Bugzilla-Priority: P2 X-Bugzilla-Assigned-To: unassigned at sourceware dot org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version bug_status bug_severity priority component assigned_to reporter target_milestone Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://sourceware.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: glibc-bugs@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Glibc-bugs mailing list List-Unsubscribe: , List-Archive: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Oct 2021 21:03:41 -0000 https://sourceware.org/bugzilla/show_bug.cgi?id=3D28506 Bug ID: 28506 Summary: malloc-check + malloc_usage_size(NULL) causes segfault Product: glibc Version: 2.35 Status: NEW Severity: normal Priority: P2 Component: malloc Assignee: unassigned at sourceware dot org Reporter: rjones at redhat dot com Target Milestone: --- glibc-2.34.9000-15.fc36.x86_64 According to the documentation, malloc_usage_size(NULL) is valid and should return 0, and indeed that is how the ordinary function behaves. However when I enable malloc-check, it segfaults instead. Test program: ------------ #include #include #include int main (void) { void *ptr =3D malloc (511); printf ("malloc_usable_size(ptr) =3D %zu\n", malloc_usable_size (ptr)); printf ("malloc_usable_size(NULL) =3D %zu\n", malloc_usable_size (NULL)); return 0; } ------------ Output: $ LD_PRELOAD=3Dlibc_malloc_debug.so.0 GLIBC_TUNABLES=3D'glibc.malloc.check= =3D1' ./malloc_usable_size malloc_usable_size(ptr) =3D 511 Segmentation fault (core dumped) --=20 You are receiving this mail because: You are on the CC list for the bug.=