diff options
Diffstat (limited to '')
| -rw-r--r-- | src/lib/libc/stdlib/malloc.3 | 20 |
1 files changed, 11 insertions, 9 deletions
diff --git a/src/lib/libc/stdlib/malloc.3 b/src/lib/libc/stdlib/malloc.3 index 4957591eef..d893626051 100644 --- a/src/lib/libc/stdlib/malloc.3 +++ b/src/lib/libc/stdlib/malloc.3 | |||
| @@ -30,9 +30,9 @@ | |||
| 30 | .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | 30 | .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
| 31 | .\" SUCH DAMAGE. | 31 | .\" SUCH DAMAGE. |
| 32 | .\" | 32 | .\" |
| 33 | .\" $OpenBSD: malloc.3,v 1.132 2023/04/17 05:45:06 jmc Exp $ | 33 | .\" $OpenBSD: malloc.3,v 1.133 2023/06/04 06:58:33 otto Exp $ |
| 34 | .\" | 34 | .\" |
| 35 | .Dd $Mdocdate: April 17 2023 $ | 35 | .Dd $Mdocdate: June 4 2023 $ |
| 36 | .Dt MALLOC 3 | 36 | .Dt MALLOC 3 |
| 37 | .Os | 37 | .Os |
| 38 | .Sh NAME | 38 | .Sh NAME |
| @@ -314,7 +314,7 @@ Increase the junk level by one if it is smaller than 2. | |||
| 314 | Decrease the junk level by one if it is larger than 0. | 314 | Decrease the junk level by one if it is larger than 0. |
| 315 | Junking writes some junk bytes into the area allocated. | 315 | Junking writes some junk bytes into the area allocated. |
| 316 | Junk is bytes of 0xdb when allocating; | 316 | Junk is bytes of 0xdb when allocating; |
| 317 | freed chunks are filled with 0xdf. | 317 | freed allocations are filled with 0xdf. |
| 318 | By default the junk level is 1: after free, | 318 | By default the junk level is 1: after free, |
| 319 | small chunks are completely junked; | 319 | small chunks are completely junked; |
| 320 | for pages the first part is junked. | 320 | for pages the first part is junked. |
| @@ -628,22 +628,24 @@ An attempt to | |||
| 628 | .Fn free | 628 | .Fn free |
| 629 | or | 629 | or |
| 630 | reallocate an unallocated pointer was made. | 630 | reallocate an unallocated pointer was made. |
| 631 | .It Dq chunk is already free | 631 | .It Dq double free |
| 632 | There was an attempt to free a chunk that had already been freed. | 632 | There was an attempt to free an allocation that had already been freed. |
| 633 | .It Dq write after free | 633 | .It Dq write after free |
| 634 | A chunk has been modified after it was freed. | 634 | An allocation has been modified after it was freed. |
| 635 | .It Dq modified chunk-pointer | 635 | .It Dq modified chunk-pointer |
| 636 | The pointer passed to | 636 | The pointer passed to |
| 637 | .Fn free | 637 | .Fn free |
| 638 | or a reallocation function has been modified. | 638 | or a reallocation function has been modified. |
| 639 | .It Dq chunk canary corrupted address offset@length | 639 | .It Dq canary corrupted address offset@length |
| 640 | A byte after the requested size has been overwritten, | 640 | A byte after the requested size has been overwritten, |
| 641 | indicating a heap overflow. | 641 | indicating a heap overflow. |
| 642 | The offset at which corruption was detected is printed before the @, | 642 | The offset at which corruption was detected is printed before the @, |
| 643 | and the requested length of the allocation after the @. | 643 | and the requested length of the allocation after the @. |
| 644 | .It Dq recorded old size oldsize != size | 644 | .It Dq recorded size oldsize inconsistent with size |
| 645 | .Fn recallocarray | 645 | .Fn recallocarray |
| 646 | has detected that the given old size does not equal the recorded size in its | 646 | or |
| 647 | .Fn freezero | ||
| 648 | has detected that the given old size does not match the recorded size in its | ||
| 647 | meta data. | 649 | meta data. |
| 648 | Enabling option | 650 | Enabling option |
| 649 | .Cm C | 651 | .Cm C |
