Victor Zverovich 615acd84dd Fix use-after-free in basic_memory_buffer move assignment ... operator= deallocates the destination's storage but leaves it pointing at the freed block with a stale capacity and size. When the allocator doesn't propagate and the two allocators are unequal, move_alloc copies into that pointer rather than taking over the source's storage, so it writes to freed memory and the destructor then frees the same block again. Restore the inline buffer after deallocating and before calling move().		2026-10-16 12:44:14 -07:00
..
fmt	Fix use-after-free in basic_memory_buffer move assignment	2026-10-16 12:44:14 -07:00