From 6f33cef716eabf95d3fc0903ebaedf172de158ab Mon Sep 17 00:00:00 2001
From: Christian Blichmann <cblichmann@google.com>
Date: Tue, 26 Jan 2021 02:31:57 -0800
Subject: [PATCH] Allow `FUTEX_WAKE` for recent libc allocators

PiperOrigin-RevId: 353827808
Change-Id: I6d1509016297fd16bec0ae6ea263896a1af9dc37
---
 sandboxed_api/sandbox2/policybuilder.cc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sandboxed_api/sandbox2/policybuilder.cc b/sandboxed_api/sandbox2/policybuilder.cc
index c487815..6a141ce 100644
--- a/sandboxed_api/sandbox2/policybuilder.cc
+++ b/sandboxed_api/sandbox2/policybuilder.cc
@@ -165,6 +165,7 @@ PolicyBuilder& PolicyBuilder::AllowTcMalloc() {
 
 PolicyBuilder& PolicyBuilder::AllowSystemMalloc() {
   AllowSyscalls({__NR_munmap, __NR_brk});
+  AllowFutexOp(FUTEX_WAKE);
   AddPolicyOnSyscall(__NR_mremap, {
                                       ARG_32(3),
                                       JEQ32(MREMAP_MAYMOVE, ALLOW),