Update of bug #68815 (group groff):
Status: In Progress => Fixed
Open/Closed: Open => Closed
_______________________________________________________
Follow-up Comment #2:
commit 687d47650bf826a1f5b2858a5b13e11ad246c3e4
Author: G. Branden Robinson <[email protected]>
Date: Wed Oct 21 22:12:08 2026 -0500
[groff]: Improve `pi` request test.
* src/roff/groff/tests/pi-request-works.sh: Fail if groff exits with a
nonzero status, which happens if an ASAN-enabled build detects memory
untidiness. This enables us to detect problems like Savannah #68815.
commit 70e2df1c4b7ba2ddfe960980e8d3fbe0eb3440f3
Author: G. Branden Robinson <[email protected]>
Date: Wed Oct 21 22:15:41 2026 -0500
src/roff/troff/input.cpp: Fix Savannah #68815.
* src/roff/troff/input.cpp (pipe_output): Drop array-deletion of `pc` on
unconditional path through command (after validation checks). We
_don't_ want to delete `pc` if we have copied its value to the global
`pipe_command`, as we then risk a use-after-free (detected by GCC 12's
ASAN).
Fixes <https://savannah.gnu.org/bugs/?68815>. Problem introduced by me
in commit 8a62f58d92, 2025-02-23.
_______________________________________________________
Reply to this item at:
<https://savannah.gnu.org/bugs/?68815>
_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/
signature.asc
Description: PGP signature
