Repository navigation
Fix use-after-free in GenericClient/GenericService message deleters - #3360
Conversation
Signed-off-by: Alejandro Hernandez Cordero <ahcorde@gmail.com>
ABI Compliance Check✅ Verdict: compatible
✅
|
Signed-off-by: Alejandro Hernandez Cordero <ahcorde@gmail.com>
clalancette
left a comment
There was a problem hiding this comment.
Looks good to me with green CI.
|
Pulls: #3360 |
…x_generic_client_service_deleters
|
Pulls: #3360 |
Description
The
shared_ptrdeleters returned byGenericClient::create_response(),GenericService::create_request()and GenericService::create_response()capturedthis` and read the message members through it. If the message outlived the client or service (for example a response kept from a future), the deleter accessed a destroyed object.this. Holding the library also keeps it loaded untilfini_functionruns.Did you use Generative AI?
Claude Opus 5.5