Skip to content

Fix cord handling in DynamicMessage and oneofs.#18374

Merged
mkruskal-google merged 6 commits into27.xfrom
cp-cord-fix-27
Sep 18, 2024
Merged

Fix cord handling in DynamicMessage and oneofs.#18374
mkruskal-google merged 6 commits into27.xfrom
cp-cord-fix-27

Conversation

@zhangskz
Copy link
Member

This fixes a memory corruption vulnerability for anyone using cord with dynamically built descriptor pools.

This fixes a memory corruption vulnerability for anyone using cord with dynamically built descriptor pools.
@zhangskz zhangskz requested review from a team as code owners September 18, 2024 14:10
@zhangskz zhangskz force-pushed the cp-cord-fix-27 branch 2 times, most recently from 0b2a5aa to 189b206 Compare September 18, 2024 16:50
    * Move -Werror to our test/dev bazelrc files.

    Putting it into BUILD files unintentionally forces it on all our downstream users.  Instead, we just want to enable this during testing and let them choose for themselves in their builds.

    Note, that this expands the scope of -Werror to our entire repo for CI, so a bunch of fixes and opt-outs had to be applied to get this change passing.

    Closed #14714

    PiperOrigin-RevId: 666903224

    * Fix extra warnings on 28.x

    * Fix zlib issues on macos

    * Second try at zlib/macos issues

    * Only disable deprecated-non-prototype on macos-14
@mkruskal-google mkruskal-google merged commit 6fa3f2d into 27.x Sep 18, 2024
@mkruskal-google mkruskal-google deleted the cp-cord-fix-27 branch September 18, 2024 18:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants