[ruby-core:75392] [Ruby trunk Bug#10296] SEGV from unchecked Data_Get_Struct() argument

From: shibata.hiroshi@...
Date: 2016-05-06 23:45:43 UTC
List: ruby-core #75392
Issue #10296 has been updated by Hiroshi SHIBATA.

Description updated

It still happens with 2.1.10.

----------------------------------------
Bug #10296: SEGV from unchecked Data_Get_Struct() argument
https://bugs.ruby-lang.org/issues/10296#change-58516

* Author: Josh Haberman
* Status: Open
* Priority: Normal
* Assignee: 
* ruby -v: ruby 2.1.3p242 (2014-09-19 revision 47630) [x86_64-darwin13.0]
* Backport: 2.0.0: UNKNOWN, 2.1: UNKNOWN
----------------------------------------
I can crash all Ruby versions I tried with this program:

```rb
require 'json'
require 'zlib'
 
module JSON
  module Ext
    module Generator
      class State
        def foo
          initialize_copy(Zlib::GzipWriter.new('foo.gz'))
        end
      end
    end
  end
end
 
state = JSON::Ext::Generator::State.new.foo
```



-- 
https://bugs.ruby-lang.org/

Unsubscribe: <mailto:ruby-core-request@ruby-lang.org?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-core>

In This Thread

Prev Next