Gerrit0 opened a new pull request, #2933:
URL: https://github.com/apache/avro/pull/2933

   ## What is the purpose of the change
   
   Fix [AVRO-3991](https://issues.apache.org/jira/browse/AVRO-3991), which is a 
potential security vulnerability.
   
   `getStringField` returns a value, not a reference, so saving its result to a 
`const std::string&` results in undefined behavior as we point to a temporary 
which has been cleaned up.
   
   ## Verifying this change
   
   This change is a trivial rework / code cleanup without any test coverage.
   
   ## Documentation
   
   - Does this pull request introduce a new feature? No
   - If yes, how is the feature documented? N/A
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@avro.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to