This repository was archived by the owner on Feb 25, 2025. It is now read-only.
fix use_of_uninitialized_value in message_loop_task_queues.cc #55520
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This issue was found with memory sanitizer.
Commit f2f09b6 introduced a change that leads to use-after-free condition.
In function MessageLoopTaskQueues::GetNextTaskToRun:
1) Call is made to PeekNextTaskUnlocked(queue_id);. Returned value contains a reference to to an object of const DelayedTask& taken from an std::queue container as returned by primary_task_queue_.top().
2) Variable TaskSource::TopTask top now contains a reference to this object.
3) Function queue_entries_.at(top.task_queue_id)->task_source->PopTask(...) which in turn calls pop() method on std::queue.
4) Object of type DelayedTask on top of the queue gets deleted.
5) top.task.GetTaskSourceGrade() is called later with top.task refering to an already deleted object.
|
It looks like this pull request may not have tests. Please make sure to add tests before merging. If you need an exemption, contact "@test-exemption-reviewer" in the #hackers channel in Discord (don't just cc them here, they won't see it!). If you are not sure if you need tests, consider this rule of thumb: the purpose of a test is to make sure someone doesn't accidentally revert the fix. Ask yourself, is there anything in your PR that you feel it is important we not accidentally revert back to how it was before your fix? Reviewers: Read the Tree Hygiene page and make sure this patch meets those guidelines before LGTMing. The test exemption team is a small volunteer group, so all reviewers should feel empowered to ask for tests, without delegating that responsibility entirely to the test exemption group. |
jason-simmons
approved these changes
Sep 30, 2024
chinmaygarde
approved these changes
Sep 30, 2024
jason-simmons
added
the
autosubmit
engine-flutter-autoroll
added a commit
to engine-flutter-autoroll/flutter
that referenced
this pull request
Sep 30, 2024
auto-submit bot
pushed a commit
to flutter/flutter
that referenced
this pull request
Sep 30, 2024
…155952) flutter/engine@b466a0d...e61bc85 2024-09-30 [email protected] fix use_of_uninitialized_value in message_loop_task_queues.cc (flutter/engine#55520) 2024-09-30 [email protected] iOS: Migrate FlutterEngineGroup to ARC (flutter/engine#55503) 2024-09-30 [email protected] Reland [skwasm] Scene builder optimizations for platform view placement (flutter/engine#55468) 2024-09-30 [email protected] Roll Dart SDK from c55ae50d619a to 79863e31de87 (1 revision) (flutter/engine#55525) 2024-09-30 [email protected] Roll Skia from 06721a724831 to dfeeb199b226 (2 revisions) (flutter/engine#55524) If this roll has caused a breakage, revert this CL and stop the roller using the controls here: https://autoroll.skia.org/r/flutter-engine-flutter-autoroll Please CC [email protected],[email protected] on the revert to ensure that a human is aware of the problem. To file a bug in Flutter: https://github.com/flutter/flutter/issues/new/choose To report a problem with the AutoRoller itself, please file a bug: https://issues.skia.org/issues/new?component=1389291&template=1850622 Documentation for the AutoRoller is here: https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md
thejitenpatel
pushed a commit
to thejitenpatel/flutter
that referenced
this pull request
Oct 1, 2024
…lutter#155952) flutter/engine@b466a0d...e61bc85 2024-09-30 [email protected] fix use_of_uninitialized_value in message_loop_task_queues.cc (flutter/engine#55520) 2024-09-30 [email protected] iOS: Migrate FlutterEngineGroup to ARC (flutter/engine#55503) 2024-09-30 [email protected] Reland [skwasm] Scene builder optimizations for platform view placement (flutter/engine#55468) 2024-09-30 [email protected] Roll Dart SDK from c55ae50d619a to 79863e31de87 (1 revision) (flutter/engine#55525) 2024-09-30 [email protected] Roll Skia from 06721a724831 to dfeeb199b226 (2 revisions) (flutter/engine#55524) If this roll has caused a breakage, revert this CL and stop the roller using the controls here: https://autoroll.skia.org/r/flutter-engine-flutter-autoroll Please CC [email protected],[email protected] on the revert to ensure that a human is aware of the problem. To file a bug in Flutter: https://github.com/flutter/flutter/issues/new/choose To report a problem with the AutoRoller itself, please file a bug: https://issues.skia.org/issues/new?component=1389291&template=1850622 Documentation for the AutoRoller is here: https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This issue was found with memory sanitizer.
Replace this paragraph with a description of what this PR is changing or adding, and why. Consider including before/after screenshots.
List which issues are fixed by this PR. You must list at least one issue.
If you had to change anything in the flutter/tests repo, include a link to the migration guide as per the breaking change policy.
Pre-launch Checklist
///).If you need help, consider asking for advice on the #hackers-new channel on Discord.