summaryrefslogtreecommitdiff
path: root/lib
diff options
context:
space:
mode:
authorOtto Moerbeek <otto@cvs.openbsd.org>2017-03-29 17:38:38 +0000
committerOtto Moerbeek <otto@cvs.openbsd.org>2017-03-29 17:38:38 +0000
commitd45c99cef174a942ab7d076120b65bd586083e46 (patch)
tree5a14f419a850ec06b60a83114539930c217426b6 /lib
parent2cb13bcd7c2f473871c9b93bd162152ccb2bd4f1 (diff)
rephrase more enumerations of functions
Diffstat (limited to 'lib')
-rw-r--r--lib/libc/stdlib/malloc.323
1 files changed, 10 insertions, 13 deletions
diff --git a/lib/libc/stdlib/malloc.3 b/lib/libc/stdlib/malloc.3
index 09b901e3599..42cf9ba9a92 100644
--- a/lib/libc/stdlib/malloc.3
+++ b/lib/libc/stdlib/malloc.3
@@ -30,9 +30,9 @@
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
-.\" $OpenBSD: malloc.3,v 1.107 2017/03/26 09:21:33 otto Exp $
+.\" $OpenBSD: malloc.3,v 1.108 2017/03/29 17:38:37 otto Exp $
.\"
-.Dd $Mdocdate: March 26 2017 $
+.Dd $Mdocdate: March 29 2017 $
.Dt MALLOC 3
.Os
.Sh NAME
@@ -165,7 +165,7 @@ If
.Fa ptr
was previously freed by
.Fn free
-or an allocation function,
+or a reallocation function,
the behavior is undefined and the double free is a security concern.
.Sh RETURN VALUES
Upon successful completion, the allocation functions
@@ -406,22 +406,17 @@ This is a rather weird condition that is most likely to indicate a
seriously overloaded system or a ulimit restriction.
.It Dq bogus pointer (double free?)
An attempt to
-.Fn free ,
-.Fn realloc ,
+.Fn free
or
-.Fn reallocarray
-an unallocated pointer was made.
+reallocate an unallocated pointer was made.
.It Dq chunk is already free
There was an attempt to free a chunk that had already been freed.
.It Dq use after free
A chunk has been modified after it was freed.
.It Dq modified chunk-pointer
The pointer passed to
-.Fn free ,
-.Fn realloc ,
-or
-.Fn reallocarray
-has been modified.
+.Fn free
+or a reallocation function has been modified.
.It Dq chunk canary corrupted address offset@length
A byte after the requested size has been overwritten,
indicating a heap overflow.
@@ -431,7 +426,9 @@ and the requested length of the allocation after the @.
.Fn recallocarray
has detected that the given old size does not equal the recorded size in its
meta data.
-Enabling option C allows
+Enabling option
+.Cm C
+allows
.Fn recallocarray
to catch more of these cases.
.It Dq recursive call