[ruby-dev:24737] Re: String#gsub causes core dump again^2

In article <[e-mail]>,
  Yukihiro Matsumoto <[e-mail]> writes:

> うちでは1.9、1.8.2ともにcoreを吐きません。free()で落ちてるみ
> たいなんでメモリ状態の問題でしょうか。

理由は分かりません。が、boron では再現します。

Z:akr@boron% ./ruby -de '
def make_unlockable_string
 callcc {|$kk|
   dest = nil
   begin
     str = "b" * 37
     n = 0
     dest = str.gsub(/\z/) {
       callcc {|k| $k = k }
      "b" * 28
     }
     n += 1
     $k.call if n == 1
   rescue RuntimeError
     p $!
   end
   $kk.call([dest, lambda { callcc {|$kk| $k.call } }])
 }
end
dest, unlock = make_unlockable_string
r, w = IO.pipe
Thread.new { r.read(dest.length, dest) }
unlock.call
dest.replace ""
loop { w << "a" * 45 }
'
Exception `RuntimeError' at -e:8 - temporal unlocking already unlocked string
#<RuntimeError: temporal unlocking already unlocked string>
Exception `RuntimeError' at -e:22 - temporal unlocking already unlocked string
-e:22:in `read': temporal unlocking already unlocked string (RuntimeError)
        from -e:22
        from -e:22:in `initialize'
        from -e:22:in `new'
        from -e:22
-e:22: [BUG] Segmentation fault
ruby 1.8.2 (2004-11-06) [i686-linux]

zsh: abort (core dumped)  ./ruby -de 
Z:akr@boron% gdb ruby core 
GNU gdb 6.1-debian
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-linux"...Using host libthread_db library "/lib/tls/libthread_db.so.1".

Core was generated by `./ruby -de 
def make_unlockable_string
 callcc {|$kk|
   dest = nil
   begin
 '.
Program terminated with signal 6, Aborted.

warning: current_sos: Can't read pathname for load map: Input/output error

Reading symbols from /lib/tls/libdl.so.2...Reading symbols from /usr/lib/debug//lib/tls/libdl-2.3.2.so...done.
done.
Loaded symbols for /lib/tls/libdl.so.2
Reading symbols from /lib/tls/libcrypt.so.1...Reading symbols from /usr/lib/debug//lib/tls/libcrypt-2.3.2.so...done.
done.
Loaded symbols for /lib/tls/libcrypt.so.1
Reading symbols from /lib/tls/libm.so.6...Reading symbols from /usr/lib/debug//lib/tls/libm-2.3.2.so...done.
done.
Loaded symbols for /lib/tls/libm.so.6
Reading symbols from /lib/tls/libc.so.6...Reading symbols from /usr/lib/debug//lib/tls/libc-2.3.2.so...done.
done.
Loaded symbols for /lib/tls/libc.so.6
Reading symbols from /lib/ld-linux.so.2...Reading symbols from /usr/lib/debug//lib/ld-2.3.2.so...done.
done.
Loaded symbols for /lib/ld-linux.so.2
#0  0x40099ed9 in raise () from /lib/tls/libc.so.6
(gdb) bt
#0  0x40099ed9 in raise () from /lib/tls/libc.so.6
#1  0x4009b771 in abort () from /lib/tls/libc.so.6
#2  0x080cbdf6 in rb_bug (fmt=0x0) at error.c:214
#3  0x080ab592 in sigsegv (sig=11) at signal.c:446
#4  <signal handler called>
#5  0x400e5488 in _int_free () from /lib/tls/libc.so.6
#6  0x400e42a0 in free () from /lib/tls/libc.so.6
#7  0x0806f246 in rb_gc_call_finalizer_at_exit () at gc.c:1850
#8  0x08053d92 in ruby_finalize_1 () at eval.c:1399
#9  0x08053ea3 in ruby_cleanup (ex=1) at eval.c:1434
#10 0x08053fe1 in ruby_stop (ex=0) at eval.c:1465
#11 0x0805404f in ruby_run () at eval.c:1486
#12 0x080521b5 in main (argc=0, argv=0x0, envp=0xbffff944) at main.c:46
(gdb) 
-- 
[田中 哲][たなか あきら][Tanaka Akira]