[bug #53284] realloc() does not respect __freelist size for small allocations

[Petteri Aimonen]

Follow-up Comment #1, bug #53284 (project avr-libc):

This got triggered by nanopb fuzz tests; I'm adding a workaround on my library
side as this would otherwise have potential security implications. It would be
great if this could eventually be fixed on avr-libc side.

I think the suggested patch does not address the case of len == 0, which
should be equivalent to free(ptr). I've attached a patch that handles that
also.

(file #48143)
    _______________________________________________________

Additional Item Attachment:

File name: avr-libc-realloc-small-len-values.patch Size:0 KB
   
<https://savannah.nongnu.org/file/avr-libc-realloc-small-len-values.patch?file_id=48143>



    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/bugs/?53284>

_______________________________________________
  Message sent via Savannah
  https://savannah.nongnu.org/