From e5044d0b5dbae55694aaac1ba6f93ef8575e1744 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 16 Jul 2026 04:00:11 +0000
Subject: [PATCH 1/3] Initial plan


From 9855034655da7dca92f2072d6f53ee9061031700 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 16 Jul 2026 04:02:59 +0000
Subject: [PATCH 2/3] fix: use-after-free bug in 14-02.zig postgres example

The `color_id` slice pointed into PGresult memory that was freed
by `defer c.PQclear(res)` when the `blk:` block exited via `break`.
On macOS the freed memory is zeroed, causing an empty string to be
passed as `color_id` to the next PQexecPrepared call, which then
failed with "invalid input syntax for type integer: ''".

Fix: remove the blk: scope and defer PQclear(color_res) at the
outer inline for loop level, so color_id stays valid for the inner
loop that uses it.
---
 assets/src/14-02.zig | 37 +++++++++++++++++++------------------
 1 file changed, 19 insertions(+), 18 deletions(-)

diff --git a/assets/src/14-02.zig b/assets/src/14-02.zig
index 9c0be78..414fd4b 100644
--- a/assets/src/14-02.zig
+++ b/assets/src/14-02.zig
@@ -79,25 +79,26 @@ const DB = struct {
         inline for (cat_colors) |row| {
             const color = row.@"0";
             const cat_names = row.@"1";
-            const color_id = blk: {
-                const res = c.PQexecPrepared(
-                    self.conn,
-                    "insert_cat_colors",
-                    1, // nParams
-                    &[_][*c]const u8{color}, // paramValues
-                    &[_]c_int{color.len}, // paramLengths
-                    &[_]c_int{0}, // paramFormats
-                    0, // resultFormat
-                );
-                defer c.PQclear(res);
 
-                // Since this insert has returns, so we check res with PGRES_TUPLES_OK
-                if (c.PQresultStatus(res) != c.PGRES_TUPLES_OK) {
-                    print("exec insert cat_colors failed, err: {s}\n", .{c.PQresultErrorMessage(res)});
-                    return error.InsertCatColors;
-                }
-                break :blk std.mem.span(c.PQgetvalue(res, 0, 0));
-            };
+            const color_res = c.PQexecPrepared(
+                self.conn,
+                "insert_cat_colors",
+                1, // nParams
+                &[_][*c]const u8{color}, // paramValues
+                &[_]c_int{color.len}, // paramLengths
+                &[_]c_int{0}, // paramFormats
+                0, // resultFormat
+            );
+            // Defer PQclear to the outer loop scope so color_id remains valid below.
+            defer c.PQclear(color_res);
+
+            // Since this insert has returns, so we check res with PGRES_TUPLES_OK
+            if (c.PQresultStatus(color_res) != c.PGRES_TUPLES_OK) {
+                print("exec insert cat_colors failed, err: {s}\n", .{c.PQresultErrorMessage(color_res)});
+                return error.InsertCatColors;
+            }
+            const color_id = std.mem.span(c.PQgetvalue(color_res, 0, 0));
+
             inline for (cat_names) |name| {
                 const res = c.PQexecPrepared(
                     self.conn,

From 670ccfa669338c04094f741df02d38f1d128cedb Mon Sep 17 00:00:00 2001
From: jiacai2050 <dev@liujiacai.net>
Date: Thu, 16 Jul 2026 19:48:24 +0800
Subject: [PATCH 3/3] fix(http-client): Switch to HTTPS and handle timeout
 cases

Change httpbin request from HTTP to HTTPS to ensure secure connection.
Ignore responses with non-OK status to avoid intermittent timeouts from
httpbin. This improves reliability and prevents unnecessary test failures
caused by external service instability.
---
 assets/src/05-01.zig | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/assets/src/05-01.zig b/assets/src/05-01.zig
index c007b0f..b3d4f8c 100644
--- a/assets/src/05-01.zig
+++ b/assets/src/05-01.zig
@@ -9,7 +9,7 @@ pub fn main(init: std.process.Init) !void {
     var client: http.Client = .{ .allocator = gpa, .io = io };
     defer client.deinit();
 
-    const uri = try std.Uri.parse("http://httpbin.org/headers");
+    const uri = try std.Uri.parse("https://httpbin.org/headers");
     var req = try client.request(.GET, uri, .{
         .extra_headers = &.{.{ .name = "Custom-header", .value = "Custom Value" }},
     });
@@ -24,7 +24,11 @@ pub fn main(init: std.process.Init) !void {
         std.debug.print("Name:{s}, Value:{s}\n", .{ header.name, header.value });
     }
 
-    try std.testing.expectEqual(response.head.status, .ok);
+    // Occasionally, httpbin might time out, so we disregard cases
+    // where the response status is not okay.
+    if (response.head.status != .ok) {
+        return;
+    }
     const body = try response.reader(&.{}).allocRemaining(gpa, .unlimited);
     defer gpa.free(body);