diff options
| author | Alexander Kornienko <alexfh@google.com> | 2025-09-27 08:38:46 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-09-27 08:38:46 +0200 |
| commit | 61012483df44c181f4200a5b6f260d27f2052df1 (patch) | |
| tree | 55ab4697c1950296c87f353dae44f1c505c9c789 /clang/lib/Frontend/ModuleDependencyCollector.cpp | |
| parent | 779adf16c941d489399d67c8befe418ad93528e4 (diff) | |
| download | llvm-61012483df44c181f4200a5b6f260d27f2052df1.zip llvm-61012483df44c181f4200a5b6f260d27f2052df1.tar.gz llvm-61012483df44c181f4200a5b6f260d27f2052df1.tar.bz2 | |
[clang] Fix a use-after free in ASTContext::getSubstBuiltinTemplatePack (#160970)
ASTContext::getSubstBuiltinTemplatePack finds InsertPos and then calls
itself
recursively, which may lead to rehashing and invalidation of all
pointers to
buckets. The function then proceeds with using the potentially invalid
InsertPos, leading to use-after-free.
The issue goes back to https://github.com/llvm/llvm-project/pull/157662.
I didn't manage to produce a reasonably-sized test case yet.
Diffstat (limited to 'clang/lib/Frontend/ModuleDependencyCollector.cpp')
0 files changed, 0 insertions, 0 deletions