[ruby-dev:24269] Array#assoc dumps core

次のようにすると core を吐きます。

% ./ruby -e '
len = 100000
arr = [[nil, nil]] * len
o = Object.new
class << o; self end.__send__(:define_method, :==) {
  arr.clear
  arr.compact!
  false
}
arr[100][0] = o
p arr.assoc(true)
'
-e:11: [BUG] Segmentation fault
ruby 1.9.0 (2004-09-14) [i686-linux]

zsh: abort (core dumped)  ./ruby -e 
% gdb ruby core 
GNU gdb 6.1-debian
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-linux"...Using host libthread_db library "/lib/libthread_db.so.1".

Core was generated by `./ruby -e 
len = 100000
arr = [[nil, nil]] * len
o = Object.new 
class << o; se'.
Program terminated with signal 6, Aborted.
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libcrypt.so.1...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
#0  0x4009e721 in kill () from /lib/libc.so.6
(gdb) bt
#0  0x4009e721 in kill () from /lib/libc.so.6
#1  0x4009e4c5 in raise () from /lib/libc.so.6
#2  0x4009f9e8 in abort () from /lib/libc.so.6
#3  0x080d0b76 in rb_bug (fmt=0x0) at error.c:214
#4  0x080af192 in sigsegv (sig=11) at signal.c:446
#5  <signal handler called>
#6  rb_ary_assoc (ary=0, key=2) at ruby.h:654
#7  0x08069e62 in call_cfunc (func=0x80c5640 <rb_ary_assoc>, recv=1075607796, len=1075607696, argc=0, argv=0xbfffeaa8)
    at eval.c:5361
#8  0x0805e117 in rb_call0 (klass=1075647656, recv=1075607796, id=6753, oid=0, argc=1, argv=0xbfffeaa8, body=0x401d0b5c, 
    nosuper=0) at eval.c:5504
#9  0x0805e3c8 in rb_call (klass=1075647656, recv=1075607796, mid=6753, argc=1, argv=0xbfffeaa8, scope=0) at eval.c:5725
#10 0x08059308 in rb_eval (self=1075673496, n=0x0) at ruby.h:634
#11 0x08059638 in rb_eval (self=1075673496, n=0x0) at ruby.h:663
#12 0x0805589b in ruby_exec () at eval.c:1458
#13 0x080558e0 in ruby_run () at eval.c:1479
#14 0x080539b5 in main (argc=0, argv=0x0, envp=0xbffff8e4) at main.c:38
(gdb) 

# これが最後のはずがない
-- 
[田中 哲][たなか あきら][Tanaka Akira]