Skip to content

Commit 38df005

Browse files
committed
Trim trailing whitespace
1 parent 5eb2bc6 commit 38df005

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

Changelog.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,13 @@
22

33
# 0.10.2 – 2022-09-06
44

5+
Fix for potential out-of-bound writes that were possible on `Heap` initialization and `Heap::extend`. See the [security advisory](https://github.com/rust-osdev/linked-list-allocator/security/advisories/GHSA-xg8p-34w2-j49j) for details. The issues were fixed in the following way:
6+
7+
- The initialization functions now panic if the given size is not large enough to store the necessary metadata. Depending on the alignment of the heap bottom pointer, the minimum size is between `2 * size_of::<usize>` and `3 * size_of::<usize>`.
8+
- The `extend` method now panics when trying to extend an unitialized heap.
9+
- Extend calls with a size smaller than `size_of::<usize>() * 2` are now buffered internally and not added to the list directly. The buffered region will be merged with future `extend` calls.
10+
- The `size()` method now returns the _usable_ size of the heap, which might be slightly smaller than the `top() - bottom()` difference because of alignment constraints.
11+
512
# 0.10.1 – 2022-07-07
613

714
- Fixed logic for freeing nodes ([#64])

0 commit comments

Comments
 (0)