Skip to content

Conversation

@pull
Copy link

@pull pull bot commented Dec 26, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

If uv_spawn() fails after uv__handle_init() has been called, the handle
remains in loop->handle_queue. This causes use-after-free if the handle
is stack-allocated or freed, and a subsequent loop operation like
uv_walk() accesses it.

This follows the same pattern as uv_tcp_init_ex() which explicitly
removes the handle from the queue on error.
@pull pull bot locked and limited conversation to collaborators Dec 26, 2025
@pull pull bot added the ⤵️ pull label Dec 26, 2025
@pull pull bot merged commit 3e9ae1b into zys-contrib:v1.x Dec 26, 2025
34 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant