Skip to content

Backport 2370 - #2429

Merged
jan-cerny merged 1 commit into
OpenSCAP:maint-1.3from
Mab879:2370_maint_1_3
Oct 5, 2026
Merged

jan-cerny merged 1 commit into
OpenSCAP:maint-1.3from
Mab879:2370_maint_1_3

Conversation

@Mab879

@Mab879 Mab879 commented Oct 5, 2026

Copy link
Copy Markdown
Member

Backport #2370

Found by fuzzing process_file() under ASan/LSan.

- create_item()'s returned object was passed to SEXP_list_add(), which
  takes its own reference, but the caller's reference was never released
  -> every collected item leaked. Free our reference after adding.
- The items accumulator list itself was never freed on return. Free it
  at cleanup; collected items are owned by the probe result object, so
  this only releases the list's references (and frees any uncollected
  items).
@Mab879 Mab879 added this to the 1.3.15 milestone Oct 5, 2026
@sonarqubecloud

sonarqubecloud Bot commented Oct 5, 2026

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
B Maintainability Rating on New Code (required ≥ A)
D Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

@jan-cerny jan-cerny left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have confirmed that the PR is the same as the linked PR and correctly backports the linked PR to the target branch.

@jan-cerny jan-cerny self-assigned this Oct 5, 2026
@jan-cerny
jan-cerny merged commit 54e8e37 into OpenSCAP:maint-1.3 Oct 5, 2026
10 of 11 checks passed
@Mab879
Mab879 deleted the 2370_maint_1_3 branch October 5, 2026 16:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants