From bc5aa4912536f6fbe0225639f97af99996a27a81 Mon Sep 17 00:00:00 2001 From: mscasso-scanoss Date: Wed, 28 Oct 2026 14:03:00 +0000 Subject: [PATCH] fix(import): read the csv fd before fclose ldb_import_csv called fileno(fp) after fclose(fp) to report a close error, which is a use-after-free (gcc -Wuse-after-free). Take the fd first, as master already does. Co-Authored-By: Claude Opus 5.5 --- src/import.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/import.c b/src/import.c index a21f24d..fbed221 100644 --- a/src/import.c +++ b/src/import.c @@ -923,8 +923,9 @@ int ldb_import_csv(ldb_importation_config_t * job) log_info("%s: %u records imported, %u skipped\n", job->csv_path, imported, skipped); + int fd = fileno(fp); if (fclose(fp)) - fprintf(stderr,"error closing %d\n", fileno(fp)); + fprintf(stderr,"error closing %d\n", fd); if (job->opt.params.delete_after_import) unlink(job->csv_path);