Skip to content

Conversation

@bt-life
Copy link

@bt-life bt-life commented Jan 17, 2026

If the ipp_set_value() function has previously called the ippFindAttribute() function, since ippFindAttribute modifies the ipp->prev pointer, causing prev to point to another attr, it results in the truncation of the ipp->attrs linked list.

Modify the ipp_set_value function to the following idempotent code to reproduce this bug:
image

Copy link
Member

@michaelrsweet michaelrsweet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we can keep the optimization by making it a little smarter by checking whether ipp->prev->next == ipp->current. But good catch!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants