Skip to content

Fix crash when copying a COMPS_ObjMDict - #166

Merged
m-blaha merged 1 commit into
rpm-software-management:masterfrom
prownd:fix-crash-when-copying-a-COMPS_ObjMDict-s01
Oct 26, 2026
Merged

m-blaha merged 1 commit into
rpm-software-management:masterfrom
prownd:fix-crash-when-copying-a-COMPS_ObjMDict-s01

Conversation

@prownd

@prownd prownd commented Oct 25, 2026

Copy link
Copy Markdown
Contributor

comps_objmrtree_copy(), the copy method of COMPS_ObjMDict, appended the copied nodes to ret->subnodes without ever creating that list, so comps_object_copy() of any blacklist/whiteout dict (and of a document containing one) used uninitialized memory and crashed.

comps_objmrtree_copy(), the copy method of COMPS_ObjMDict, appended the
copied nodes to ret->subnodes without ever creating that list, so
comps_object_copy() of any blacklist/whiteout dict (and of a document
containing one) used uninitialized memory and crashed.

Signed-off-by: hanjinpeng <hanjinpeng@kylinos.cn>

@m-blaha m-blaha left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@m-blaha
m-blaha merged commit 3dd5cbe into rpm-software-management:master Oct 26, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants