Slab: improved double free detection.

Previously, an attempt to double free the starting page of the free range was not detected.
kavonm · Dec 3, 2016 · cdd0cd6 · cdd0cd6
1 parent 34b41a7
commit cdd0cd6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/core/ngx_slab.c b/src/core/ngx_slab.c
@@ -597,7 +597,7 @@ ngx_slab_free_locked(ngx_slab_pool_t *pool, void *p)
             goto wrong_chunk;
         }
 
-        if (slab == NGX_SLAB_PAGE_FREE) {
+        if (!(slab & NGX_SLAB_PAGE_START)) {
             ngx_slab_error(pool, NGX_LOG_ALERT,
                            "ngx_slab_free(): page is already free");
             goto fail;