From: "byroot (Jean Boussier) via ruby-core" Date: 2026-11-08T18:34:14+00:00 Subject: [ruby-core:127360] [Ruby Bug#22512] Overflow in `st_init_existing_table_with_size` / `Hash.new(capacity:)` Issue #22512 has been updated by byroot (Jean Boussier). Backport PRs: - 4.0 https://github.com/ruby/ruby/pull/19775 - 3.4 https://github.com/ruby/ruby/pull/19776 ---------------------------------------- Bug #22512: Overflow in `st_init_existing_table_with_size` / `Hash.new(capacity:)` https://bugs.ruby-lang.org/issues/22512#change-119792 * Author: byroot (Jean Boussier) * Status: Closed * Backport: 3.3: WONTFIX, 3.4: REQUIRED, 4.0: REQUIRED ---------------------------------------- If provided a large enough size, `st_init_existing_table_with_size` and `Hash.new(capacity:)` can overflow instead of raising, which could ultimately lead to a crash. That being said, this bug isn't treated as a security vulnerability, because by design using an unstrusted number as a capacity open to DOS attacks regardless of the overflow. Patch: https://github.com/ruby/ruby/pull/19773 -- https://bugs.ruby-lang.org/ ______________________________________________ ruby-core mailing list -- ruby-core@ml.ruby-lang.org To unsubscribe send an email to ruby-core-leave@ml.ruby-lang.org ruby-core info -- https://ml.ruby-lang.org/mailman3/lists/ruby-core.ml.ruby-lang.org/