diff options
| author |  Eric Sunshine <sunshine@sunshineco.com> | 2015-02-09 16:28:07 -0500 |
|---|---|---|
| committer |  Junio C Hamano <gitster@pobox.com> | 2015-02-10 10:31:48 -0800 |
| commit | e60059276b26db5760e36aa85cf1091f662430fb (patch) | |
| tree | 0e107adab2b3b6ad7e093be2adec357f81f1e611 /Documentation/RelNotes/1.6.0.5.txt | |
| parent | Merge branch 'jk/dotgit-case-maint-1.8.5' into maint-1.8.5 (diff) | |
| download | tgif-e60059276b26db5760e36aa85cf1091f662430fb.tar.xz | |
builtin/blame: destroy initialized commit_info only
Since ea02ffa3 (mailmap: simplify map_user() interface, 2013-01-05),
find_alignment() has been invoking commit_info_destroy() on an
uninitialized auto 'struct commit_info' (when METAINFO_SHOWN is not
set). commit_info_destroy() calls strbuf_release() for each
'commit_info' strbuf member, which randomly invokes free() on
whatever random stack value happens to reside in strbuf.buf, thus
leading to periodic crashes.
Reported-by: Dilyan Palauzov <dilyan.palauzov@aegee.org>
Signed-off-by: Eric Sunshine <sunshine@sunshineco.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'Documentation/RelNotes/1.6.0.5.txt')
0 files changed, 0 insertions, 0 deletions