Title: [288866] trunk/Source/bmalloc
Revision
288866
Author
[email protected]
Date
2022-01-31 20:32:46 -0800 (Mon, 31 Jan 2022)

Log Message

[libpas] get_num_free_bytes_for_each_heap_callback() is called with `arg` pointing to uninitialized stack memory
<https://webkit.org/b/235931>
<rdar://problem/88303899>

Reviewed by Yusuke Suzuki.

* libpas/src/libpas/pas_all_heaps.c:
(pas_all_heaps_get_num_free_bytes):
- Initialize `result` stack variable to zero.

Modified Paths

Diff

Modified: trunk/Source/bmalloc/ChangeLog (288865 => 288866)


--- trunk/Source/bmalloc/ChangeLog	2022-02-01 02:57:22 UTC (rev 288865)
+++ trunk/Source/bmalloc/ChangeLog	2022-02-01 04:32:46 UTC (rev 288866)
@@ -1,3 +1,15 @@
+2022-01-31  David Kilzer  <[email protected]>
+
+        [libpas] get_num_free_bytes_for_each_heap_callback() is called with `arg` pointing to uninitialized stack memory
+        <https://webkit.org/b/235931>
+        <rdar://problem/88303899>
+
+        Reviewed by Yusuke Suzuki.
+
+        * libpas/src/libpas/pas_all_heaps.c:
+        (pas_all_heaps_get_num_free_bytes):
+        - Initialize `result` stack variable to zero.
+
 2022-01-21  Commit Queue  <[email protected]>
 
         Unreviewed, reverting r288400.

Modified: trunk/Source/bmalloc/libpas/src/libpas/pas_all_heaps.c (288865 => 288866)


--- trunk/Source/bmalloc/libpas/src/libpas/pas_all_heaps.c	2022-02-01 02:57:22 UTC (rev 288865)
+++ trunk/Source/bmalloc/libpas/src/libpas/pas_all_heaps.c	2022-02-01 04:32:46 UTC (rev 288866)
@@ -193,7 +193,7 @@
 
 size_t pas_all_heaps_get_num_free_bytes(pas_lock_hold_mode heap_lock_hold_mode)
 {
-    size_t result;
+    size_t result = 0;
     pas_heap_lock_lock_conditionally(heap_lock_hold_mode);
     pas_all_heaps_for_each_heap(get_num_free_bytes_for_each_heap_callback, &result);
     result += pas_utility_heap_get_num_free_bytes();
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to