From: Taylor Blau <me@ttaylorr.com>
Date: Tue, 11 Jan 2022 15:42:11 GMT
Subject: Re: [PATCH] fmt-merge-msg: prevent use-after-free with signed tags
Message-ID: <Yd2lU/ecNx1uIt7Q@nand.local>
In-Reply-To: <20220111084115.esuyxeopdpaq7g7y@fs>

On Tue, Jan 11, 2022 at 09:41:15AM +0100, Fabian Stelzer wrote:
> fmt_merge_msg_sigs() could probably use some additional refactoring to avoid
> these multiple pointers to the same (detached) buffer. But thats for another
> time.

I thought similarly when trying to looking at the original bisection.
But now that we're in the release candidate phase, I figure that any
less-than-minimal fix was liable to cause more harm than good.

It is worth looking at in the future, though.

Thanks,
Taylor