From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/2451 Path: news.gmane.org!not-for-mail From: Szabolcs Nagy Newsgroups: gmane.linux.lib.musl.general Subject: Re: stdio self-synchronized destruction: does it need fixing? Date: Mon, 10 Dec 2012 23:57:53 +0100 Message-ID: <20121210225752.GI23126@port70.net> References: <20121210180508.GA2313@brightrain.aerifal.cx> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1355180290 17490 80.91.229.3 (10 Dec 2012 22:58:10 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 10 Dec 2012 22:58:10 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-2452-gllmg-musl=m.gmane.org@lists.openwall.com Mon Dec 10 23:58:24 2012 Return-path: Envelope-to: gllmg-musl@plane.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1TiCIl-0002M2-Vg for gllmg-musl@plane.gmane.org; Mon, 10 Dec 2012 23:58:20 +0100 Original-Received: (qmail 28045 invoked by uid 550); 10 Dec 2012 22:58:07 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 28037 invoked from network); 10 Dec 2012 22:58:07 -0000 Content-Disposition: inline In-Reply-To: <20121210180508.GA2313@brightrain.aerifal.cx> User-Agent: Mutt/1.5.21 (2010-09-15) Xref: news.gmane.org gmane.linux.lib.musl.general:2451 Archived-At: * Rich Felker [2012-12-10 13:05:09 -0500]: > memory. The allocation of FILE structues is always performed by libc, > and always happens via malloc with a small-size allocation, which > means the memory is managed as part of the heap and never unmapped > once it's mapped. Thus, as far as I can tell, the worst that can > happen is a read-only access to memory no longer owned by the FILE, at least write a comment there that the invalid read is known (btw at some point someone may rewrite malloc so small allocations can go to mmapped areas as well which may be reclaimed..)