MMAP(2) malloc, here we go again.

Back out to brk(2) version.

The mmap(2) code is cool and it has already uncovered some bugs in other code.
But some issues remain on some archs, and we can't afford that for production.

Don't worry

Back out to brk(2) version.

The mmap(2) code is cool and it has already uncovered some bugs in other code.
But some issues remain on some archs, and we can't afford that for production.

Don't worry, it will be back soon... I'll make sure of it...

show more ...

- Remove the userland data limit check. It's mmap(2)'s job.
- When malloc_abort==0 (MALLOC_OPTIONS=a), don't abort in wrterror().

fine deraadt@

Missing check for NULL.

After a long gestation period, here comes our custom version of malloc(3)
using mmap(2) instead of sbrk(2).
To make a long story short, using mmap(2) in malloc(3) allows us to draw
all the benefits f

After a long gestation period, here comes our custom version of malloc(3)
using mmap(2) instead of sbrk(2).
To make a long story short, using mmap(2) in malloc(3) allows us to draw
all the benefits from our mmap(2)'s randomization feature, closing the
effort we did for returning memory blocks from random addresses.

Tested for a long time by many, thanks to them.
Go for it ! deraadt@

show more ...

Clean up malloc_active state when aborting.
This allows for safe abort handling, without tripping into
false recursivity problems.

Ok tedu@, deraadt@

Sanity fix.
reviewed by deraadt@, tedu@

only whine about recursion once, so we don't get into problems with loops.

by popular demand, malloc guard pages. insert an unreadable/unwriteable
page after each page size allocation to detect overrun. this is
somewhat electric fence like, while attempting to be mostly u

by popular demand, malloc guard pages. insert an unreadable/unwriteable
page after each page size allocation to detect overrun. this is
somewhat electric fence like, while attempting to be mostly usable in
production. also, use tdeval's chunk randomization code.
enabled with the G option.
ok deraadt and co.

show more ...

abort on errors by default. workaround so running out of memory isn't
actually an error, A still applies full effect.
suggested by phk. ok deraadt@ tdeval@

two minor fixes. set errno on recursive calls. ENOMEM suggested by marc@.
lock before setting malloc_func, not after.
ok cloder@ deraadt@

full stop. reverse course. remove all periods, so as to be aligned
with error messages elsewhere. requested ok deraadt@ henning@

remove register. end all sentences with periods.
ok deraadt@ henning@ millert@

ansify function arguments

ok tdeval@

- just warn in case of mmap/brk failure
- extend_pgdir and malloc_make_chunks return int, not void*

ok tedu@

Fix two cases where malloc() returns NULL but does not set errno to ENOMEM.
ok tdeval@ henning@ millert@

Unbreak 64-bit archs...

Pointer cleaning. ok ian@, tedu@, krw@

Add sanity check to prevent int oflow for very large allocations.
Also fix a signed vs. unsigned issue while I am at it.
Found by Jim Geovedi. OK deraadt@

Honour malloc_junk ('J') with realloc(3), and fix page_dir shrink update.

Warn if atexit(3) fails. Change some tabs to spaces. Use
STDERR_FILENO instead of 2.

OK millert@

thread safe libc -- 2nd try. OK miod@, millert@
Thanks to miod@ for m68k and vax fixes

back out previous patch.. there are still some vax/m68k issues

libc changes for thread safety. Tested on:
alpha (millert@), i386 (marc@), m68k (millert@ and miod@),
powerpc (drahn@ and dhartmei@), sparc (millert@ and marc@),
sparc64 (marc@), and vax (millert@ a

libc changes for thread safety. Tested on:
alpha (millert@), i386 (marc@), m68k (millert@ and miod@),
powerpc (drahn@ and dhartmei@), sparc (millert@ and marc@),
sparc64 (marc@), and vax (millert@ and miod@).
Thanks to millert@, miod@, and mickey@ for fixes along the way.

show more ...

unsigned vs unsigned int