comment __malloc_donate overflow logic
This commit is contained in:
@@ -563,6 +563,9 @@ void __malloc_donate(char *start, char *end)
|
|||||||
size_t align_start_up = (SIZE_ALIGN-1) & (-(uintptr_t)start - OVERHEAD);
|
size_t align_start_up = (SIZE_ALIGN-1) & (-(uintptr_t)start - OVERHEAD);
|
||||||
size_t align_end_down = (SIZE_ALIGN-1) & (uintptr_t)end;
|
size_t align_end_down = (SIZE_ALIGN-1) & (uintptr_t)end;
|
||||||
|
|
||||||
|
/* Getting past this condition ensures that the padding for alignment
|
||||||
|
* and header overhead will not overflow and will leave a nonzero
|
||||||
|
* multiple of SIZE_ALIGN bytes between start and end. */
|
||||||
if (end - start <= OVERHEAD + align_start_up + align_end_down)
|
if (end - start <= OVERHEAD + align_start_up + align_end_down)
|
||||||
return;
|
return;
|
||||||
start += align_start_up + OVERHEAD;
|
start += align_start_up + OVERHEAD;
|
||||||
|
|||||||
Reference in New Issue
Block a user