Use after free check for all private zones too

Gumpula, Suresh Suresh.Gumpula at netapp.com
Mon Jun 1 16:55:53 UTC 2015


Hi,
  I have attached the diff.  Can somebody please review and commit this ?



Thanks
Suresh


On 5/4/15, 12:49 PM, "Gumpula, Suresh" <Suresh.Gumpula at netapp.com> wrote:

>Hi ,
>     Currently use after free check is available for  power of 2 malloc
>zones ( mt_rash_ctor/ m_trash_dotr ) which writes uma_junk(0xdeadc0de) on
>freed memory and
>validates on reusing the object for others .
>   Similary we( NETAPP)  have added a check for all  other private zones
>too with  trash_ctor/ trash_dtor .    We pass the trash_ctor/trash_dtor
>to uma_zcreate(9) if  it is called with NULL for constructor/destructor.
>This change uncovered the couple of bugs inernally.  One  of this is in
>tcp timer bug
>https://svnweb.freebsd.org/base?view=revision&revision=281599
>
>Its a useful check and uncovers use after free bugs .  Would like to push
>this change .  Any comments/suggestions  please ?
>
>Thanks
>Suresh
>
>
>
>_______________________________________________
>freebsd-hackers at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
>To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"

-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch.patch
Type: application/octet-stream
Size: 1446 bytes
Desc: patch.patch
URL: <http://lists.freebsd.org/pipermail/freebsd-hackers/attachments/20150601/8b5991cb/attachment.obj>


More information about the freebsd-hackers mailing list