tree 70277c31f8e16003ebe7a6d9022922a983944e94
parent 1ba886fb6983e795dc12f6f2c6cf3159481c0c5d
author Jason Evans <jasone@canonware.com> 1412539510 -0700
committer Jason Evans <jasone@canonware.com> 1481050663 -0800

Fix OOM-related regression in arena_tcache_fill_small().

Fix an OOM-related regression in arena_tcache_fill_small() that caused
cache corruption that would almost certainly expose the application to
undefined behavior, usually in the form of an allocation request
returning an already-allocated region, or somewhat less likely, a freed
region that had already been returned to the arena, thus making it
available to the arena for any purpose.

This regression was introduced by
9c43c13a35220c10d97a886616899189daceb359 (Reverse tcache fill order.),
and was present in all releases from 2.2.0 through 3.6.0.

This resolves #98.