Landing: aaa8351f4d2e

← All landings

Project / Subsystem

gcc / libstdc++

Date

2026-09-25

Author

Jonathan Wakely

Commit

aaa8351f4d2e636f9680a1f0a8ebc2f0a60611e6

Source

github

Perf win

Breaking

View on GitHub →

All attributes

project: gcc
subsystem: libstdc++
patch_id: —
commit_hash: aaa8351f4d2e636f9680a1f0a8ebc2f0a60611e6
source_type: github
headline: Fix use-after-free in pbds binary heap
tldr: Fixed a use-after-free vulnerability and memory leak in the Policy-Based Data Structures binary heap.
author: Jonathan Wakely
outcome: committed
performance_win: false
breaking_change: false
series_id: —
series_parts: []
tags: • libstdc++
• security
• memory safety
• CVE
discussion_id_link: —
bugzilla_pr: —
url: https://github.com/gcc-mirror/gcc/commit/aaa8351f4d2e636f9680a1f0a8ebc2f0a60611e6
date: 2026-09-25T00:00:00.000Z

A use-after-free vulnerability and a memory leak in the Policy-Based Data Structures (pbds) binary heap implementation have been fixed. After reallocating storage for the heap, the m_a_entries pointer was left dangling, leading to potential crashes and memory corruption when accessed. The fix ensures that m_a_entries is updated correctly after reallocation, and the leaked memory is also reclaimed. A test case for this specific issue has been added.