Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | tweak previous; ok sthen | jmc | 2014-05-01 | 1 | -3/+3 |
| | |||||
* | first cut at documenting the change to malloc doing a partial 'junk' by | sthen | 2014-04-30 | 1 | -2/+7 |
| | | | | default and the new 'j' option to disable this; ok jmc@ | ||||
* | - one more mallocarray -> reallocarray | jmc | 2014-04-22 | 1 | -3/+3 |
| | | | | - use <> | ||||
* | change mallocarray to reallocarray. useful in a few more situations. | tedu | 2014-04-22 | 1 | -12/+9 |
| | | | | | malloc can, as always, be emulated via realloc(NULL). ok deraadt | ||||
* | Introducing: void *mallocarray(size_t nmemb, size_t size); | deraadt | 2014-04-21 | 1 | -7/+22 |
| | | | | | Like calloc(), except without the cleared-memory gaurantee ok beck guenther, discussed for more than a year... | ||||
* | HISTORY; tweaks and ok sobrado@ jmc@ | schwarze | 2013-07-18 | 1 | -5/+22 |
| | |||||
* | Use the fancy .In macro for includes. From Jan Klemkow. ok jmc schwarze | tedu | 2013-06-05 | 1 | -3/+3 |
| | |||||
* | Add a new malloc option 'U' => "Free unmap" that does the guarding/ | djm | 2012-11-02 | 1 | -3/+12 |
| | | | | | | | | | | | | unmapping of freed allocations without disabling chunk randomisation like the "Freeguard" ('F') option does. Make security 'S' option use 'U' and not 'F'. Rationale: guarding with no chunk randomisation is great for debugging use-after-free, but chunk randomisation offers better defence against "heap feng shui" style attacks that depend on carefully constructing a particular heap layout so we should leave this enabled when requesting security options. | ||||
* | Show (in the example) that < and > can be used multiple times; ok jmc@ | otto | 2011-07-22 | 1 | -4/+5 |
| | | | | jasper@ | ||||
* | - add a MALLOC_OPTIONS section header. the content is already there, but having | jasper | 2011-07-21 | 1 | -3/+3 |
| | | | | | | a section will help people looking for just the MALLOC_OPTIONS. ok otto@ jmc@ | ||||
* | oops - forgot to check for trailing whitespace; | jmc | 2010-05-26 | 1 | -2/+2 |
| | |||||
* | reword the 'D' dump bit to make it clear that the malloc.out file needs | thib | 2010-05-26 | 1 | -4/+5 |
| | | | | | | | to exist before exit for malloc to dump stats in it. tweaks from jmc@ ok otto@,jmc@ | ||||
* | add posix_madvise, posix_memalign, strndup, and strnlen. mostly from | tedu | 2010-05-18 | 1 | -3/+4 |
| | | | | | brad and millert, with hints from guenther, jmc, and otto I think. ok previous. | ||||
* | stucture -> structure; | jmc | 2010-01-25 | 1 | -3/+3 |
| | |||||
* | New options 'S', as a shorthand for the options most suitable as an | otto | 2010-01-13 | 1 | -2/+4 |
| | | | | extra safeguard (FGJ). Idea from deraadt@; ok deraadt@ dlg@ | ||||
* | rewrite the history section, prompted by Paul Stoeber; ok deraadt@ jmc@ | otto | 2009-10-10 | 1 | -25/+28 |
| | |||||
* | kill whitespace at eol; | jmc | 2009-02-13 | 1 | -2/+2 |
| | |||||
* | decribe 'F' better and mention flags are debugging aids; ok tedu@ jmc@ | otto | 2009-02-13 | 1 | -8/+10 |
| | |||||
* | Remove mprotecting of struct dir_info introduced in previous commit | djm | 2008-12-30 | 1 | -9/+2 |
| | | | | | | | (MALLOC_OPTIONS=L). It was too slow to turn on by default, and we don't do optional security. requested by deraadt@ grumbling ok otto@ | ||||
* | extra paranoia for malloc(3): | djm | 2008-12-29 | 1 | -2/+9 |
| | | | | | | | | | | | | | | | | Move all runtime options into a structure that is made read-only (via mprotect) after initialisation to protect against attacks that overwrite options to turn off malloc protections (e.g. use-after-free) Allocate the main bookkeeping data (struct dir_info) using mmap(), thereby giving it an unpredictable address. Place a PROT_NONE guard page on either side to further frustrate attacks on it. Add a new 'L' option that maps struct dir_info PROT_NONE except when in the allocator code itself. Makes attacks on it basically impossible. feedback tedu deraadt otto canacar ok otto | ||||
* | Fix typo, okay jmc@. | pedro | 2008-11-26 | 1 | -3/+3 |
| | |||||
* | move allocations between half a page and a page as close to the end of | otto | 2008-11-20 | 1 | -2/+3 |
| | | | | | the page as possible (i.e. make malloc option P a default). ok art@ millert@ krw@ | ||||
* | fix markup of example line and description of G flag; partly from and | otto | 2008-11-02 | 1 | -5/+4 |
| | | | | ok jmc@ | ||||
* | remove distinction between warnings and errors, ok deraadt@ djm@ | otto | 2008-11-02 | 1 | -26/+18 |
| | |||||
* | small cleanup of error/warning strings | otto | 2008-08-07 | 1 | -3/+3 |
| | |||||
* | man page bits for new malloc; ok jmc@ | otto | 2008-07-28 | 1 | -43/+33 |
| | |||||
* | kill an Xr to a non-existent man page, ulimit(1); | jmc | 2008-05-20 | 1 | -5/+3 |
| | |||||
* | remove recalloc(3); it is buggy and impossible to repair without big | otto | 2008-05-19 | 1 | -25/+3 |
| | | | | costs; ok jmc@ for the man page bits; ok millert@ deraadt@ | ||||
* | no need to talk about bits; ok millert jmc | deraadt | 2007-09-05 | 1 | -3/+3 |
| | |||||
* | Update free(3) section--we use mmap()/munmap(), not brk(). | millert | 2007-09-03 | 1 | -4/+6 |
| | | | | Based on a diff from Mike Belopuhov. OK jmc@ | ||||
* | add recaloc(3) | millert | 2007-09-03 | 1 | -3/+25 |
| | |||||
* | Clarify the example about avoiding overflow. OK ray@ deraadt@ | millert | 2007-08-08 | 1 | -3/+3 |
| | |||||
* | convert to new .Dd format; | jmc | 2007-05-31 | 1 | -2/+2 |
| | |||||
* | Fix 'double by a factor of two' and make cache options a bit more | pedro | 2006-06-06 | 1 | -4/+4 |
| | | | | descriptive while at it, input and okay jmc@ | ||||
* | Use SIZE_MAX instead of SIZE_T_MAX, the latter is not POSIX and | otto | 2006-04-02 | 1 | -2/+2 |
| | | | | remove redundant check on size. ok millert@ deraadt@ | ||||
* | Add warning about malloc(num * size) and recommend calloc() instead, | ray | 2006-03-26 | 1 | -5/+40 |
| | | | | | | | | or if malloc must be used suggest check. Get rid of "one". OK deraadt@ and jmc@, OK kjell@ to earlier version with "one"s. | ||||
* | missing auxillary verb | jakemsr | 2006-01-18 | 1 | -2/+2 |
| | | | | "yes, that is correct." jmc@ (a while back) | ||||
* | - typos, punctuation, layout, macro tweaks | jaredy | 2005-07-26 | 1 | -4/+11 |
| | | | | | | - break long lines ok jmc | ||||
* | no need to insert spacing between list members; | jmc | 2005-06-07 | 1 | -13/+1 |
| | |||||
* | adding pointer protection to 'G' was too heavyweight. Since malloc guard | tedu | 2005-06-07 | 1 | -3/+6 |
| | | | | should be generally usable, split this out into option 'P'. ok deraadt | ||||
* | add a note describing latest guard feature | tedu | 2005-05-24 | 1 | -1/+3 |
| | |||||
* | kill dead .Xr to memory(3); | jmc | 2004-07-02 | 1 | -3/+2 |
| | | | | from kjell@ | ||||
* | punctuate variable; okay jmc@. | espie | 2004-02-09 | 1 | -2/+2 |
| | |||||
* | H comes before J; | jmc | 2004-02-04 | 1 | -6/+6 |
| | |||||
* | 'F'reeguard doc, as reported missing by brad. nit free thanks to jmc | tedu | 2004-02-02 | 1 | -1/+8 |
| | |||||
* | wording improvements from Brian Poole; | jmc | 2003-11-25 | 1 | -5/+4 |
| | | | | kill a .Pp before a display; | ||||
* | by popular demand, malloc guard pages. insert an unreadable/unwriteable | tedu | 2003-10-16 | 1 | -1/+7 |
| | | | | | | | | page after each page size allocation to detect overrun. this is somewhat electric fence like, while attempting to be mostly usable in production. also, use tdeval's chunk randomization code. enabled with the G option. ok deraadt and co. | ||||
* | It is safe to pass free() a NULL pointer since C89; update example to | millert | 2003-09-26 | 1 | -3/+2 |
| | | | | this effect. OK deraadt@ pvalchev@ | ||||
* | improve example even more | deraadt | 2003-09-25 | 1 | -3/+4 |
| | |||||
* | expand on the realloc no-no section to include adjusting a length before | tedu | 2003-09-18 | 1 | -6/+12 |
| | | | | the allocation. ok deraadt@ markus@ |