[#8815] Segfault in libc strlen, via rb_str_new2 — "Sean E. Russell" <ser@...>

Howdy,

12 messages 2006/09/09
[#8817] Re: Segfault in libc strlen, via rb_str_new2 — Eric Hodel <drbrain@...7.net> 2006/09/09

On Sep 8, 2006, at 10:10 PM, Sean E. Russell wrote:

Re: new changes in strings+symbols

From: Yukihiro Matsumoto <matz@...>
Date: 2006-09-14 07:34:43 UTC
List: ruby-core #8863
Hi,

In message "Re: new changes in strings+symbols"
    on Thu, 14 Sep 2006 10:24:17 +0900, Mathieu Bouchard <matju@artengine.ca> writes:

|Generating RDoc documentation
|./miniruby  ./runruby.rb --extout=.ext -- "./bin/rdoc" --all --ri --op 
|"/home/matju/share/ri/1.9/system" "."
|/debian64/home/matju/src/ruby-cvs/ruby/lib/rdoc/rdoc.rb:86:in 
|`String#intern': Insecure: can't intern tainted string (SecurityError)
|         from /debian64/home/matju/src/ruby-cvs/ruby/lib/rdoc/rdoc.rb:86
|
|Which I saw was a feature introduced in a commit a few days (hours?) ago.

The security check was too strict.  I just fixed in the HEAD.

|Besides, given that symbols can contain nulls now, why are symbols still 
|prevented from being of null length? It's something that has been a 
|problem in mapping Ruby to another language (PureData) in which 
|empty-string symbols are (abnormally) common.

Makes sense.  I will allow zero length symbols in the HEAD.

							matz.

In This Thread