summaryrefslogtreecommitdiff
path: root/libm
diff options
context:
space:
mode:
authorChristophe Lyon <christophe.lyon@st.com>2018-07-04 17:55:41 +0200
committerWaldemar Brodkorb <wbrodkorb@conet.de>2018-08-10 16:02:45 +0200
commitb5ec02b92c19dd3ab63aa7017682f60dec8f3ccc (patch)
tree37f5985cd504d14cfb623c4712e7d5d636d7f21e /libm
parenta7d538fddb21427681704e027e2fdea2bed686c7 (diff)
Fix htab_delete loop counter
dlclose can crash or stuck the system: When calling dlclose() then system can crash or freeze, because htab_delete() in ldso/ldso/fdpic/dl-inlines.h uses size_t for i which is a typedef to unsigned int. We exit the loop on negative value of i which can never occur since i is an unsigned int. This leads to random free of various pointers that kill the system. * ldso/include/inline-hashtab.h (htab_delete): Change type of 'i' to int. Signed-off-by: Mickaël Guêné <mickael.guene@st.com> Signed-off-by: Christophe Lyon <christophe.lyon@st.com>
Diffstat (limited to 'libm')
0 files changed, 0 insertions, 0 deletions