Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix cord handling in DynamicMessage and oneofs. #18374

Merged
merged 6 commits into from
Sep 18, 2024
Merged

Conversation

zhangskz
Copy link
Member

This fixes a memory corruption vulnerability for anyone using cord with dynamically built descriptor pools.

This fixes a memory corruption vulnerability for anyone using cord with dynamically built descriptor pools.
@zhangskz zhangskz requested review from a team as code owners September 18, 2024 14:10
@zhangskz zhangskz force-pushed the cp-cord-fix-27 branch 2 times, most recently from 0b2a5aa to 189b206 Compare September 18, 2024 16:50
    * Move -Werror to our test/dev bazelrc files.

    Putting it into BUILD files unintentionally forces it on all our downstream users.  Instead, we just want to enable this during testing and let them choose for themselves in their builds.

    Note, that this expands the scope of -Werror to our entire repo for CI, so a bunch of fixes and opt-outs had to be applied to get this change passing.

    Closed #14714

    PiperOrigin-RevId: 666903224

    * Fix extra warnings on 28.x

    * Fix zlib issues on macos

    * Second try at zlib/macos issues

    * Only disable deprecated-non-prototype on macos-14
@mkruskal-google mkruskal-google merged commit 6fa3f2d into 27.x Sep 18, 2024
175 checks passed
@mkruskal-google mkruskal-google deleted the cp-cord-fix-27 branch September 18, 2024 18:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants