On Wed Oct 7, 2026 at 12:27 PM CEST, Hemanth Kumar M D via lists.openembedded.org wrote: > From: Hemanth Kumar M D <[email protected]> > > PR 127656 use-after-free in libstdc++ pbds binary heap erase_if > > After reallocating the storage the m_a_entries pointer is left dangling > and the new storage is leaked. Update m_a_entries after reallocation > > References: > https://nvd.nist.gov/vuln/detail/CVE-2026-102010 > https://gcc.gnu.org/bugzilla/show_bug.cgi?id=127656 > https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=aaa8351f4d2e636f9680a1f0a8ebc2f0a60611e6 > > Signed-off-by: Hemanth Kumar M D <[email protected]> > ---
I do note this is triggering some warning on the autobuilder, but I don't understand what might be the link with this patch. It might be a previously existing issue. https://autobuilder.yoctoproject.org/valkyrie/#/builders/19/builds/4789 Thanks, Mathieu -- Mathieu Dubois-Briand, Bootlin Embedded Linux and Kernel engineering https://bootlin.com
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#247422): https://lists.openembedded.org/g/openembedded-core/message/247422 Mute This Topic: https://lists.openembedded.org/mt/121625318/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
