microsoft / microsoft/PowerToys

Bug: CommandLineToArgvW memory leak in PowerToys.Update.exe

Open Beginner friendly
#46,965 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Area-Setup/Install Product-General
Dominant language
C
Stars
139k
Forks
8.6k
PR merge metrics
PR metrics pending

Description

## Description
`PowerToys.Update.cpp` WinMain calls `CommandLineToArgvW` but never calls `LocalFree` on the returned pointer, leaking memory on every update execution.

## Impact
Memory leak on every PowerToys.Update.exe invocation. Low severity since the process is short-lived.

## Fix
Add `LocalFree(args)` before all return paths, or use a RAII wrapper.

Found during multi-agent code review of #46889.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start in PowerToys.Update.cpp at WinMain and trace the CommandLineToArgvW call through every return path. Confirm that the returned args pointer is released with LocalFree before the process exits, then verify the update executable still builds and runs normally.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
desktop
Issue type
Bug
Difficulty
1/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Clearly specified
Newbie friendliness
84/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.