tarantool / tarantool / 6143735611

86%

master: 88%

push

github

box: fix out of bound write in error_payload_destroy()

If `strlen(name)` is 1, `value_size` is 1, and `extra` is 0, then 15 bytes
are allocated for `struct error_field` in error_payload_prepare(). However,
the size of this structure is 16 because of the padding for the alignment.
Thus TRASH() in error_payload_destroy() writes 1 byte beyond the structure.

Closes #9098

NO_DOC=bugfix

(cherry picked from commit 454ffd13b)

62307 of 114151 branches covered (0.0%)

13 of 13 new or added lines in 1 file covered. (100.0%)

93297 of 108694 relevant lines covered (85.83%)

2614150.17 hits per line