fix double free for hdrs (pass ownership to message) (confluentinc#4628)

blindspotbounty · Quuxplusone · web-flow · commit be00619e1e6b · 2025-09-23T15:03:37.000+02:00
---------

Co-authored-by: Arthur O'Dwyer &lt;arthur.j.odwyer@gmail.com&gt;
diff --git a/src/rdkafka_msg.c b/src/rdkafka_msg.c
@@ -491,6 +491,8 @@ rd_kafka_produceva(rd_kafka_t *rk, const rd_kafka_vu_t *vus, size_t cnt) {
                                            rd_kafka_err2str(err));
                 goto err;
         }
+        /* 'hdrs' is now owned by 'rkm' */
+        hdrs = NULL;
 
         /* Partition the message */
         err = rd_kafka_msg_partitioner(rkt, rkm, 1);

Original file line number	Diff line number	Diff line change
`@@ -491,6 +491,8 @@ rd_kafka_produceva(rd_kafka_t rk, const rd_kafka_vu_t vus, size_t cnt) {`
`491`	`491`	`rd_kafka_err2str(err));`
`492`	`492`	`goto err;`
`493`	`493`	`}`
	`494`	`+ /* 'hdrs' is now owned by 'rkm' */`
	`495`	`+ hdrs = NULL;`
`494`	`496`
`495`	`497`	`/* Partition the message */`
`496`	`498`	`err = rd_kafka_msg_partitioner(rkt, rkm, 1);`