diff options
author | Ulrich Drepper <drepper@redhat.com> | 2008-05-18 06:29:10 +0000 |
---|---|---|
committer | Ulrich Drepper <drepper@redhat.com> | 2008-05-18 06:29:10 +0000 |
commit | 5811d72b73328601ace56b3ef41043b3e9eec84f (patch) | |
tree | cc78becc39505d2ae9bbed16295c222066816701 | |
parent | fa526148d6d78bf97f5628a023d290d071b47592 (diff) | |
download | glibc-5811d72b73328601ace56b3ef41043b3e9eec84f.zip glibc-5811d72b73328601ace56b3ef41043b3e9eec84f.tar.gz glibc-5811d72b73328601ace56b3ef41043b3e9eec84f.tar.bz2 |
* nscd/mem.c (gc): Avoid stack overflow when allocating move list.cvs/fedora-glibc-20080518T1017
-rw-r--r-- | ChangeLog | 2 | ||||
-rw-r--r-- | nscd/mem.c | 18 |
2 files changed, 18 insertions, 2 deletions
@@ -1,5 +1,7 @@ 2008-05-17 Ulrich Drepper <drepper@redhat.com> + * nscd/mem.c (gc): Avoid stack overflow when allocating move list. + * nscd/mem.c (gc): Correctly determine highest used array element in mark. @@ -24,6 +24,7 @@ #include <inttypes.h> #include <libintl.h> #include <limits.h> +#include <obstack.h> #include <stdlib.h> #include <string.h> #include <unistd.h> @@ -157,6 +158,7 @@ gc (struct database_dyn *db) he = alloca (db->head->nentries * sizeof (struct hashentry *)); he_data = alloca (db->head->nentries * sizeof (struct hashentry *)); he_use_malloc = false; + stack_used += memory_needed; } else { @@ -305,6 +307,10 @@ gc (struct database_dyn *db) size_t size; struct moveinfo *next; } *moves = NULL; +#define obstack_chunk_alloc xmalloc +#define obstack_chunk_free free + struct obstack ob; + obstack_init (&ob); while (byte < high) { @@ -365,8 +371,14 @@ gc (struct database_dyn *db) displacement. */ ref_t disp = off_alloc - off_free; - struct moveinfo *new_move - = (struct moveinfo *) alloca (sizeof (*new_move)); + struct moveinfo *new_move; + if (stack_used + sizeof (*new_move) <= MAX_STACK_USE) + { + new_move = alloca (sizeof (*new_move)); + stack_used += sizeof (*new_move); + } + else + new_move = obstack_alloc (&ob, sizeof (*new_move)); new_move->from = db->data + off_alloc; new_move->to = db->data + off_free; new_move->size = off_allocend - off_alloc; @@ -526,6 +538,8 @@ gc (struct database_dyn *db) free (he); if (mark_use_malloc) free (mark); + + obstack_free (&ob, NULL); } |