Control: retitle -1 libsvn1: svn merge can yield unexpected changes in the WC and segfault due to null pointer dereference Control: severity -1 serious
On 2026-03-23 15:10:00 +0100, Vincent Lefevre wrote: > During a svn merge with conflicts, svn crashed with a segmentation fault: More than a crash, this also changes a file (more precisely, this adds a property) in a path that is unrelated to the target of the merge. Thus this introduces incorrect data. Only the working copy is affected at this time, but such a change is not visible without a specific command such as "svn status" or "svn diff" (even with that, the change may be more or less hidden among other changes: for instance, when I reported this bug, I did not see it initially), so that a commit may easily affect the repository too. For a repository that is partly public (depending on the paths), some private data may unexpectedly become public. Thus I'm raising the severity to serious. -- Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)
