https://bugs.kde.org/show_bug.cgi?id=363741

Daniel Vrátil <dvra...@kde.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|CONFIRMED                   |RESOLVED
      Latest Commit|                            |http://commits.kde.org/akon
                   |                            |adi-search/1e70d63a9439f48b
                   |                            |5f1a70accac531a10f4e4239
   Version Fixed In|                            |5.3.2

--- Comment #31 from Daniel Vrátil <dvra...@kde.org> ---
Git commit 1e70d63a9439f48b5f1a70accac531a10f4e4239 by Daniel Vrátil.
Committed on 09/10/2016 at 22:52.
Pushed by dvratil into branch 'Applications/16.08'.

Create AgePostingSource on heap

There was an undocumented behaviour change in Xapian 1.4 where
Xapian::Query() no longer internally creates a clone of the
PostingResource that we pass to it and instead takes a (shared)
ownership of the pointer that is then re-used later while
the actual query is being executed, which means that the
PostingResource must live at least until the query execution
is finished.

We were creating the AgePostingSource on stack, which lead to
use-after-free in Xapian 1.4.
FIXED-IN: 5.3.2

M  +1    -2    search/email/emailsearchstore.cpp

http://commits.kde.org/akonadi-search/1e70d63a9439f48b5f1a70accac531a10f4e4239

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to