adf3bf
From b52cdd7a8525325deba04554d8a00a578c397d56 Mon Sep 17 00:00:00 2001
adf3bf
From: David Mitchell <davem@iabyn.com>
adf3bf
Date: Thu, 11 Jul 2019 15:17:48 +0100
adf3bf
Subject: [PATCH] threads::shared: fix leak
adf3bf
MIME-Version: 1.0
adf3bf
Content-Type: text/plain; charset=UTF-8
adf3bf
Content-Transfer-Encoding: 8bit
adf3bf
adf3bf
When assigning a shared reference value to a variable containing a
adf3bf
shared string, the PV buffer in the shared space was leaked. For
adf3bf
example:
adf3bf
adf3bf
    my $s :shared = "foo";
adf3bf
    my $t :shared  = shared_clone(\"bar");
adf3bf
    $s = $t; # "foo" in shared space leaked
adf3bf
adf3bf
This was showing up as failed smokes under ASan.
adf3bf
adf3bf
Petr Písař: Ported to 1.60 from perl commit
adf3bf
59c73bd3d62c5096a6f9b2e3cbe05e1ab4c158cf.
adf3bf
adf3bf
Signed-off-by: Petr Písař <ppisar@redhat.com>
adf3bf
---
adf3bf
 shared.xs | 15 +++++++++++----
adf3bf
 1 file changed, 11 insertions(+), 4 deletions(-)
adf3bf
adf3bf
diff --git a/shared.xs b/shared.xs
adf3bf
index 6cdf094..858c6d6 100644
adf3bf
--- a/shared.xs
adf3bf
+++ b/shared.xs
adf3bf
@@ -818,12 +818,19 @@ sharedsv_scalar_store(pTHX_ SV *sv, SV *ssv)
adf3bf
         SV *obj = SvRV(sv);
adf3bf
         SV *sobj = Perl_sharedsv_find(aTHX_ obj);
adf3bf
         if (sobj) {
adf3bf
+            SV* tmpref;
adf3bf
             SHARED_CONTEXT;
adf3bf
-            (void)SvUPGRADE(ssv, SVt_RV);
adf3bf
-            sv_setsv_nomg(ssv, &PL_sv_undef);
adf3bf
+            /* Creating a tmp ref to sobj then assigning it to ssv ensures
adf3bf
+             * that any previous contents of ssv are correctly freed
adf3bf
+             * by sv_setsv(). Not sure if there is a better, API-legal way
adf3bf
+             * to achieve this */
adf3bf
+            tmpref = newSV_type(SVt_RV);
adf3bf
+            SvRV_set(tmpref, sobj);
adf3bf
+            SvROK_on(tmpref);
adf3bf
+            SvREFCNT_inc_simple_NN(sobj);
adf3bf
+            sv_setsv_nomg(ssv, tmpref);
adf3bf
+            SvREFCNT_dec_NN(tmpref);
adf3bf
 
adf3bf
-            SvRV_set(ssv, SvREFCNT_inc(sobj));
adf3bf
-            SvROK_on(ssv);
adf3bf
             if (SvOBJECT(sobj)) {
adf3bf
                 /* Remove any old blessing */
adf3bf
                 SvREFCNT_dec(SvSTASH(sobj));
adf3bf
-- 
adf3bf
2.20.1
adf3bf