[Debian-med-packaging] Bug#1139550: marked as pending in terraphast

Andreas Tille noreply at salsa.debian.org
Sat Oct 17 18:16:16 BST 2026


Control: tag -1 pending

Hello,

Bug #1139550 in terraphast reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/med-team/terraphast/-/commit/ed32ca4ddd5f632b1ca2346e06a608920e01fa57

------------------------------------------------------------------------
Fix heap corruption when the multitree memory limit is reached (Closes: #1139550)

When the multitree memory limit is hit, begin_iteration() returns an
unexplored node because the alternative array could not be allocated, but
continue_iteration() still returned true (the memory accounting was below
the limit).  The iteration loop then called accumulate() on the unexplored
node, writing a full multitree_node (including a GMP big_integer) into the
leaf array of the unexplored node.  This corrupted the heap and could
abort with a 'realloc(): invalid pointer' inside GMP, making the unittests
fail randomly (FTBFS).

Mark the memory limit as hit whenever begin_iteration() has to fall back
to an unexplored node so that continue_iteration() stops the iteration.
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1139550



More information about the Debian-med-packaging mailing list