[PATCH v2] misc: Fix out-of-bounds array write in tdelete (bug 34506)

[Florian Weimer]

* Florian Weimer:

> * Adhemerval Zanella Netto:
>
>> On 14/08/26 05:19, Florian Weimer wrote:
>>> Allocate the maximum array sizes directly, instead of resizing
>>> the arrays as needed.  This eliminates alloca usage from the
>>> function, and fixes the out-of-bounds accesses.  The asserts
>>> guard against the bug coming back if the balancing of the tree
>>> turns out not to work correctly.
>>
>> LGTM, thanks.
>>
>> Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
>
> Thanks.  Should we treat this as a security vulnerability?

Never mind, I forgot that it's CVE-2026-19542.

Florian