| commit | b6c32c59749812d035c2b96815a3c653724d22c4 | [log] [tgz] |
|---|---|---|
| author | Richard Weinberger <richard@nod.at> | Fri Aug 02 12:08:45 2024 +0200 |
| committer | Tom Rini <trini@konsulko.com> | Thu Aug 15 16:14:36 2024 -0600 |
| tree | 6ea44a94335c94ccf6a0cebd2eea06680b165e6e | |
| parent | 9bc2d8221c6d7aef81c90bec1b034d1fab71d9a9 [diff] |
dlmalloc: Fix integer overflow in sbrk() Make sure that the new break is within mem_malloc_start and mem_malloc_end before making progress. ulong new = old + increment; can overflow for extremely large increment values and memset() can get wrongly called. Signed-off-by: Richard Weinberger <richard@nod.at> Reviewed-by: Simon Glass <sjg@chromium.org>