Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Access of memory past the end of a memory buffer #2

Open
gaoethan opened this issue Nov 17, 2017 · 1 comment
Open

Access of memory past the end of a memory buffer #2

gaoethan opened this issue Nov 17, 2017 · 1 comment

Comments

@gaoethan
Copy link

gaoethan commented Nov 17, 2017

In the API malloc_ex() free_ex() realloc_ex() taking address with &tlsf->fl_bitmap yields a singleton pointer and passing &tlsf->fl_bitmap to function set_bit which uses it as an array. This might corrupt or misinterpret adjacent memory locations. Out-of-bounds access that memory not owned by this buffer will be accessed, causing memory corruption or incorrect computations.

#ros2/tlsf#5

@gaoethan
Copy link
Author

sorry, the following was unexpectedly referenced here while operating with a ctrl+v, please ignore it, which has nothing to do with this issue

gaoethan/uncrustify#1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant