Do not apply __attribute__((__malloc__)) to dbus_realloc()
authorSimon McVittie <smcv@collabora.com>
Thu, 23 Aug 2018 08:01:03 +0000 (09:01 +0100)
committerSimon McVittie <smcv@collabora.com>
Thu, 30 Aug 2018 16:34:25 +0000 (17:34 +0100)
As noted in GLib commit c879f50f, gcc's interpretation of the malloc
attribute has become more strict over time, which could result in
miscompilation. The new definition is that in addition to assuming
that the returned memory block is newly-allocated, gcc now assumes
that it does not contain any valid pointers. This is OK for
uninitialized or zero-initialized memory returned by dbus_malloc()
or dbus_malloc0(), but not valid for dbus_realloc(), which might be
used for a dynamically-sized array of (structures containing)
valid pointers.

See https://gitlab.gnome.org/GNOME/glib/issues/1465

Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: Philip Withnall <withnall@endlessm.com>
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=107741

dbus/dbus-memory.h

index 4fd56bd..c575b46 100644 (file)
@@ -48,7 +48,6 @@ DBUS_ALLOC_SIZE(1)
 void* dbus_malloc0       (size_t bytes);
 
 DBUS_EXPORT
-DBUS_MALLOC
 DBUS_ALLOC_SIZE(2)
 void* dbus_realloc       (void  *memory,
                           size_t bytes);