Access of memory past the end of a memory buffer #2
Description
In the API malloc_ex() free_ex() realloc_ex() taking address with &tlsf->fl_bitmap yields a singleton pointer and passing &tlsf->fl_bitmap to function set_bit which uses it as an array. This might corrupt or misinterpret adjacent memory locations. Out-of-bounds access that memory not owned by this buffer will be accessed, causing memory corruption or incorrect computations.