[Bug 4001] New: Add MADV_DONTNEED_LOCKED to seccomp-bpf allowlist for hardened_malloc

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Sep 7 03:02:50 AEST 2026


https://bugzilla.mindrot.org/show_bug.cgi?id=4001

            Bug ID: 4001
           Summary: Add MADV_DONTNEED_LOCKED to seccomp-bpf allowlist for
                    hardened_malloc
           Product: Portable OpenSSH
           Version: 10.5p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Miscellaneous
          Assignee: unassigned-bugs at mindrot.org
          Reporter: artem at grapheneos.org

In GrapheneOS's hardened_malloc, we moved from MADV_DONTNEED to
MADV_DONTNEED_LOCKED to properly handle locked memory by discarding the
pages.

Please add MADV_DONTNEED_LOCKED to the allowlist.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list