You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@orc.apache.org by "Zoltán Borók-Nagy (Jira)" <ji...@apache.org> on 2020/01/09 12:48:00 UTC
[jira] [Created] (ORC-586) [C++] Memory leak in StructColumnReader
Zoltán Borók-Nagy created ORC-586:
-------------------------------------
Summary: [C++] Memory leak in StructColumnReader
Key: ORC-586
URL: https://issues.apache.org/jira/browse/ORC-586
Project: ORC
Issue Type: Bug
Reporter: Zoltán Borók-Nagy
StructColumnReader can leak memory if its constructor throws an exception.
StructColumnReader has a member vector<ColumnReader*> called 'children' which is filled in the constructor:
[https://github.com/apache/orc/blob/c26ff4c351d7c34c4272442a6874703f510282a8/c%2B%2B/src/ColumnReader.cc#L874]
{noformat}
for(unsigned int i=0; i < type.getSubtypeCount(); ++i) { const Type& child = *type.getSubtype(i); if (selectedColumns[static_cast<uint64_t>(child.getColumnId())]) { children.push_back(buildReader(child, stripe).release()); } }
{noformat}
buildReader() returns a unique_ptr, but the constructor calls release() on it which returns the underlying raw pointer and in the meantime the unique_ptr releases the ownership.
StructColumnReader's destructor is supposed to invoke delete on these raw pointers, but if an exception is thrown during the construction of a StructColumnReader, then only the destructors of the member variables are called. Therefore the vector gets destroyed, but the ColumnReader objects are leaked.
The solution is to store unique_ptrs in the vector instead of raw pointers.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)