tarantool / tarantool / 5679363120

86%

master: 88%

push

github

applier: fix use after free

Applier thread uses lsregion to allocate the messages for tx thread. The
messages are freed upon return to the applier thread using a
corresponding lsr_id.

Due to a typo, one of the lsregion allocations was made with a postfix
increment of lsr_id instead of the prefix one. Essentially, part of a
new message was allocated with an old lsr_id, and might be freed early
by a return of a previous message.

Fix this.

Closes #8848

NO_DOC=bugfix
NO_TEST=covered by asan in #8901
NO_CHANGELOG=bugfix

(cherry picked from commit 0d5bd6b7b)

62227 of 114076 branches covered (54.55%)

1 of 1 new or added line in 1 file covered. (100.0%)

93189 of 108623 relevant lines covered (85.79%)

3001650.07 hits per line