Fix #1046: use-after-free when factory destroyed before tree #1081
+111
−1
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Tree::remapManifestPointers()to re-point manifest pointers from the factory's internal storage to the tree's ownmanifestsmap aftercreateTree()createTreevariants (createTreeFromText,createTreeFromFile,createTree)BehaviorTreeFactoryis destroyed beforeTree::tickWhileRunning()is calledFixes #1046
Test plan
BehaviorTreeFactory.FactoryDestroyedBeforeTicktest that reproduces the use-after-free scenario🤖 Generated with Claude Code
Summary by CodeRabbit
Release Notes
✏️ Tip: You can customize this high-level summary in your review settings.