Module Name:    src
Committed By:   maxv
Date:           Thu Mar  7 18:32:10 UTC 2019

Modified Files:
        src/sys/kern: kern_malloc.c

Log Message:
Mmh, fix len, mh_size includes the malloc header, but we don't redzone it.


To generate a diff of this commit:
cvs rdiff -u -r1.155 -r1.156 src/sys/kern/kern_malloc.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/sys/kern/kern_malloc.c
diff -u src/sys/kern/kern_malloc.c:1.155 src/sys/kern/kern_malloc.c:1.156
--- src/sys/kern/kern_malloc.c:1.155	Sun Dec 23 12:15:01 2018
+++ src/sys/kern/kern_malloc.c	Thu Mar  7 18:32:10 2019
@@ -1,4 +1,4 @@
-/*	$NetBSD: kern_malloc.c,v 1.155 2018/12/23 12:15:01 maxv Exp $	*/
+/*	$NetBSD: kern_malloc.c,v 1.156 2019/03/07 18:32:10 maxv Exp $	*/
 
 /*
  * Copyright (c) 1987, 1991, 1993
@@ -70,7 +70,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: kern_malloc.c,v 1.155 2018/12/23 12:15:01 maxv Exp $");
+__KERNEL_RCSID(0, "$NetBSD: kern_malloc.c,v 1.156 2019/03/07 18:32:10 maxv Exp $");
 
 #include <sys/param.h>
 #include <sys/malloc.h>
@@ -152,7 +152,8 @@ kern_free(void *addr)
 	mh = addr;
 	mh--;
 
-	kasan_mark(addr, mh->mh_size, mh->mh_size);
+	kasan_mark(addr, mh->mh_size - sizeof(struct malloc_header),
+	    mh->mh_size - sizeof(struct malloc_header));
 
 	if (mh->mh_size >= PAGE_SIZE + sizeof(struct malloc_header))
 		kmem_intr_free((char *)addr - PAGE_SIZE,

Reply via email to