fix(libstore-tests): remove use-after-free bug for StringSource
(backport #11813)
#12190
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Unfortunately
StringSource
class is very easy was very easy to misuse because the ctor took a plainstd::string_view
which has a bad habit of being implicitly convertible from an rvaluestd::string
. This lead to unintentional use-after-free bugs.This patch makes
StringSource
much harder to misuse by disabling the ctor from astd::string &&
(butconst std::string &
is ok).Fix affected tests from libstore-tests.
Reformat those tests with clangd's range formatting since the diff is tiny and it seems appropriate.
Motivation
Ran some tests under ASAN and UBSAN and got shocked by the amount of errors. This looks a good starting point for starting to untangle them.
Context
For reference here's the ASAN log for one of the two tests:
Priorities and Process
Add 👍 to pull requests you find important.
The Nix maintainer team uses a GitHub project board to schedule and track reviews.
This is an automatic backport of pull request #11813 done by [Mergify](https://mergify.com).