已开启
[Upstream Patch Analysis] systemd bugfix commits on 2026-04-11 #377
chenhaixiang创建于 4月12日
4月12日 添加了label：sig/Base-service
openeuler-ci-bot
4月12日 评论：
4月12日 评论：
Welcome To openEuler Community
Hey @chenhaixiang , thanks for your contribution to the community.
Bot Usage Manual
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.
Contact Guide
If you have any questions, please contact the SIG: Base-service ,
and any of the maintainers: @dillon_chen, @licihua, @overweight, @shenyangyang, @zhujianwei001 ,
and any of the committers: @jiayi0118, @licunlong, @protkhn, @shenyangyang, @xujing99, @yue-yuankun .
jiayi0118
4月12日 评论：
4月12日 评论：
@jiayi0118 /branches /
jiayi0118
4月12日 评论：
4月12日 评论：
@jiayi0118 /branches <master>
jiayi0118
4月12日 评论：
4月12日 评论：
上游补丁回合结果
目标分支：
- master
- openEuler-20.03-LTS-SP4
- openEuler-22.03-LTS-SP4
- openEuler-24.03-LTS
- openEuler-24.03-LTS-Next
- openEuler-24.03-LTS-SP1
- openEuler-24.03-LTS-SP2
- openEuler-24.03-LTS-SP3
PR：
- master: https://atomgit.com/src-openeuler/systemd/merge_requests/996
- openEuler-20.03-LTS-SP4: https://atomgit.com/src-openeuler/systemd/merge_requests/997
- openEuler-22.03-LTS-SP4: https://atomgit.com/src-openeuler/systemd/merge_requests/998
- openEuler-24.03-LTS: https://atomgit.com/src-openeuler/systemd/merge_requests/999
说明：
- master: 非CVE场景，直接应用
- openEuler-20.03-LTS-SP4: 非CVE场景，直接应用
- openEuler-22.03-LTS-SP4: 非CVE场景，直接应用
- openEuler-24.03-LTS: 非CVE场景，直接应用
- openEuler-24.03-LTS-Next: 非CVE场景，直接应用
- openEuler-24.03-LTS-SP1: 非CVE场景，直接应用
- openEuler-24.03-LTS-SP2: 非CVE场景，直接应用
- openEuler-24.03-LTS-SP3: 非CVE场景，直接应用
jiayi0118
4月12日 评论：
4月12日 评论：
上游补丁回合结果
目标分支：
- master
- openEuler-20.03-LTS-SP4
- openEuler-22.03-LTS-SP4
- openEuler-24.03-LTS
- openEuler-24.03-LTS-Next
- openEuler-24.03-LTS-SP1
- openEuler-24.03-LTS-SP2
- openEuler-24.03-LTS-SP3
PR：
- master: https://atomgit.com/src-openeuler/systemd/merge_requests/1000
- openEuler-20.03-LTS-SP4: https://atomgit.com/src-openeuler/systemd/merge_requests/1001
- openEuler-22.03-LTS-SP4: https://atomgit.com/src-openeuler/systemd/merge_requests/1002
- openEuler-24.03-LTS: https://atomgit.com/src-openeuler/systemd/merge_requests/1003
说明：
- master: 非CVE场景，直接应用
- openEuler-20.03-LTS-SP4: 非CVE场景，直接应用
- openEuler-22.03-LTS-SP4: 非CVE场景，直接应用
- openEuler-24.03-LTS: 非CVE场景，直接应用
- openEuler-24.03-LTS-Next: 非CVE场景，直接应用
- openEuler-24.03-LTS-SP1: 非CVE场景，直接应用
- openEuler-24.03-LTS-SP2: 非CVE场景，直接应用
- openEuler-24.03-LTS-SP3: 非CVE场景，直接应用
jiayi0118
4月12日 评论：
4月12日 评论：
@jiayi0118 /branches master
jiayi0118
4月12日 评论：
4月12日 评论：
@jiayi0118 /branches openEuler-24.03-LTS-SP3
jiayi0118
4月12日 评论：
4月12日 评论：
上游补丁回合结果
目标分支：
- master
- openEuler-20.03-LTS-SP4
- openEuler-22.03-LTS-SP4
- openEuler-24.03-LTS
- openEuler-24.03-LTS-Next
- openEuler-24.03-LTS-SP1
- openEuler-24.03-LTS-SP2
- openEuler-24.03-LTS-SP3
PR：
- master: https://atomgit.com/src-openeuler/systemd/merge_requests/1004
- openEuler-20.03-LTS-SP4: https://atomgit.com/src-openeuler/systemd/merge_requests/1005
- openEuler-22.03-LTS-SP4: https://atomgit.com/src-openeuler/systemd/merge_requests/1006
- openEuler-24.03-LTS: https://atomgit.com/src-openeuler/systemd/merge_requests/1007
说明：
- master: 非CVE场景，直接应用
- openEuler-20.03-LTS-SP4: 非CVE场景，直接应用
- openEuler-22.03-LTS-SP4: 非CVE场景，直接应用
- openEuler-24.03-LTS: 非CVE场景，直接应用
- openEuler-24.03-LTS-Next: 非CVE场景，直接应用
- openEuler-24.03-LTS-SP1: 非CVE场景，直接应用
- openEuler-24.03-LTS-SP2: 非CVE场景，直接应用
- openEuler-24.03-LTS-SP3: 非CVE场景，直接应用
systemd Upstream Patch Analysis Report
Summary
Commit Analysis
1. [53c87c09] - json-stream: fix NULL pointer passed to memcpy on first read with INPUT_SENSITIVE
Analysis
Bugfix indicators:
fix: The commit message starts with "fix", explicitly indicating a bug fix.memcpy(), which is undefined behavior in C even when the length is zero. This is a correctness bug caught by UBSan.JSON_STREAM_INPUT_SENSITIVEis set before the first read,input_bufferis NULL andinput_buffer_sizeis 0. The old condition!INPUT_SENSITIVE && index == 0incorrectly routes to a code path that callsmemcpy()with a NULL source pointer.6b1a59d59426cdda56648b00394addde2d454418, indicating it patches a regression or oversight from a previous change.Affected component:
json-stream(JSON stream parsing with sensitive input handling)Conclusion
On 2026-04-11, there was only 1 commit on the systemd main branch, and it was a bugfix. The commit fixes a NULL pointer dereference in the JSON stream parser when
INPUT_SENSITIVEmode is enabled before the first read.