RootCauseunvalidated
For tunables whose security_level is NOT SXID_ERASE (e.g. glibc.malloc.mxfast which is SXID_IGNORE). Outcome: The 'off' offset grows past the original allocation, corrupting __minimal_malloc heap right next to ld.so loader data structures.
9c7b7122-d008-4027-958b-e0441b7b75cc
For tunables whose security_level is NOT SXID_ERASE (e.g. glibc.malloc.mxfast which is SXID_IGNORE). Outcome: The 'off' offset grows past the original allocation, corrupting __minimal_malloc heap right next to ld.so loader data structures.