tree f98f5c9baf2a00b4840e79e8872f0f151de5d4fb
parent dcbf1e99d811449a04fa92b84108d8d34d635f1a
author Aaron Green <aarongreen@pigweed.infra.roller.google.com> 1729189402 +0000
committer CQ Bot Account <pigweed-scoped@luci-project-accounts.iam.gserviceaccount.com> 1729189402 +0000

roll: pigweed pw_allocator: Fix data race

Prior to this CL, a corruption existed in the following scenario:

- Block 1 is allocated.
 - Block 2 is allocated with an alignment requirement that results in
   a small gap of less than a minimumu-sized block between blocks 1
   and 2. The extra bytes are added to the end of block 1.
 - Block 1 is resized to be slightly bigger by less than the extra
   bytes. Since the block size does not change, `Resize` trivially
   returns.
 - Block 2 is freed, and reclaims the bytes it lent to block 1.
 - Block 1 tries to access its trailing bytes concurrently with a new
   block being allocated.

The fix is simply to update the tracked number of extra bytes, even when
the `Resize` is trivial.

Original-Bug: 372446436
Original-Reviewed-on: https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/242736
Original-Revision: 57183dee645126c67dcccbb479c730492ef168f6

Rolled-Repo: https://pigweed.googlesource.com/pigweed/pigweed
Rolled-Commits: 8e0d91c3f7da31..57183dee645126
Roll-Count: 1
Roller-URL: https://ci.chromium.org/b/8733807474633820033
GitWatcher: ignore
CQ-Do-Not-Cancel-Tryjobs: true
Change-Id: Ib10f19ee38f4f903c9afc9a73afdbfa2c191b968
Reviewed-on: https://pigweed-review.googlesource.com/c/pigweed/quickstart/bazel/+/242921
Bot-Commit: Pigweed Roller <pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com>
Commit-Queue: Pigweed Roller <pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com>
Lint: Lint 🤖 <android-build-ayeaye@system.gserviceaccount.com>