diff options
author | ilezhankin <[email protected]> | 2025-07-07 15:18:36 +0300 |
---|---|---|
committer | ilezhankin <[email protected]> | 2025-07-07 15:41:17 +0300 |
commit | 7b5e0194f5ddeab1c864112b1716b70b969ac7b2 (patch) | |
tree | 46479b31af3c55a1d1ee96376a4e805708d444a5 /yql/essentials/docs/en/syntax | |
parent | e2889c97b547cd49f01fc62ea72e5b3a0068e143 (diff) |
Fix returning pointer for zero-sized allocation outside of page
The problematic scenario looks like this:
- Allocate new page on arena
- Return pointer for the last piece of the page - so `offset == size`
- Try to allocate zero-sized segment - since `offset + 0 <= size` we return pointer to `page + offset`
- `GetStartOfPage(page + offset)` returns the next page - and it leads to malicious behavior for the next (probably unmapped) page
Now we don't allow to physically allocate zero-sized region and use aligned stub object.
commit_hash:5fa77d6bd78c7f712f35da943fcfe9023f78ec5e
Diffstat (limited to 'yql/essentials/docs/en/syntax')
0 files changed, 0 insertions, 0 deletions