From: Bill Kelly <billk@...>
Date: 2008-06-30T20:53:12+09:00
Subject: [ruby-core:17468] Re: Ruby 1.9.0/1.8.7/1.8.6/1.8.5 new releases (Security Fix)


From: "ts" <decoux@moulon.inra.fr>
>>  before RESIZE_CAPA() it has RSTRING(str)->ptr == ptr
>>  and apparently realloc(RSTRING(str)->ptr) (in RESIZE_CAPA)
>>  make ptr invalid

Ah... so obvious, now.  :D


From: "Urabe Shyouhei" <shyouhei@ruby-lang.org>
>
> Thank you Guy, this helped me a lot.  I think I've backported what's
> needed from ruby_1_8. Please try again.

Tried on:

ruby 1.8.6 (2008-06-30 patchlevel 256) [i686-linux]
ruby 1.8.6 (2008-06-30 patchlevel 256) [x86_64-linux]
ruby 1.8.6 (2008-06-30 patchlevel 256) [i386-mswin32_71]

...all good.


Thanks !!

Bill