Closed Bug 1459722 Opened 4 years ago Closed 4 years ago
Undefined behavior in zxx
zxx_stream::zxx_stream() (mozglue\linker\zip.h) initializes itself in part using memset(): 40: memset (this, 0, sizeof(z_stream)); where |z_stream| is a base class of |zxx_stream|. This code invokes undefined behavior, since it assumes that the base class subobject resides at |this|, which contravenes C++11 s.10: ------ [t]he order in which the base class subobjects are allocated in the most derived object (1.8) is unspecified." ------ zxx_stream() appears to be used in Android builds only.
Mike, can you please take a look at this and weigh in on the severity?
Practically speaking, it doesn't matter. The worse that could happen is the allocator field being overwritten with zeroes, which would only mean zlib would be using new/delete instead of the given allocator. But in practice that doesn't happen anyways.
And in fact, the only thing that was using the StaticAllocator was removed in bug 1376704, so a lot of this can actually be removed.
I have a patch to remove the whole class. Can this bug be unflagged as confidential so that I can push it to mozreview?
Assignee: nobody → mh+mozilla
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
Comment on attachment 8974608 [details] Bug 1459722 - Remove zxx_stream. https://reviewboard.mozilla.org/r/242982/#review248876 WFM.
Attachment #8974608 - Flags: review?(nfroyd) → review+
Pushed by email@example.com: https://hg.mozilla.org/integration/autoland/rev/ba2417447483 Remove zxx_stream. r=froydnj
You need to log in before you can comment on or make changes to this bug.