[ruby-dev:24768] SystemCallError#initialize dumps core

次のようにすると core を吐きます。

% ./ruby -e '
class C < SystemCallError
  Errno = 100
end
v = C.allocate
mesg = []
class << mesg; self end.send(:define_method, :to_str) {
  "v" * 1000
}
v.instance_eval { initialize mesg }
'
-e:10: [BUG] Segmentation fault
ruby 1.9.0 (2004-11-10) [i686-linux]

zsh: abort (core dumped)  ./ruby -e 
% gdb ruby core
GNU gdb 6.1-debian
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-linux"...Using host libthread_db library "/lib/libthread_db.so.1".

Core was generated by `./ruby -e 
class C < SystemCallError
  Errno = 100
end
v = C.allocate
mesg = []'.
Program terminated with signal 6, Aborted.
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libcrypt.so.1...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
#0  0x4009e6b1 in kill () from /lib/libc.so.6
(gdb) bt
#0  0x4009e6b1 in kill () from /lib/libc.so.6
#1  0x4009e435 in raise () from /lib/libc.so.6
#2  0x4009f978 in abort () from /lib/libc.so.6
#3  0x080d50a6 in rb_bug (fmt=0x0) at error.c:214
#4  0x080b2112 in sigsegv (sig=11) at signal.c:446
#5  <signal handler called>
#6  0x400e7555 in mallopt () from /lib/libc.so.6
#7  0x400e6150 in realloc () from /lib/libc.so.6
#8  0x08070089 in ruby_xrealloc (ptr=0x813cd98, size=1075466400) at gc.c:162
#9  0x080b6525 in rb_str_resize (str=1075607736, len=1018) at string.c:666
#10 0x080d6173 in syserr_initialize (argc=1075607736, argv=0x0, self=1075607976) at error.c:962
#11 0x0806a8fa in call_cfunc (func=0x80d6070 <syserr_initialize>, recv=1075607976, len=1024, argc=33, argv=0xbfffdf48)
    at eval.c:5366
#12 0x0805e847 in rb_call0 (klass=1075662836, recv=1075607976, id=2969, oid=1987475056, argc=1, argv=0xbfffdf48, 
    body=0x401d4fcc, nosuper=0) at eval.c:5507
#13 0x0805eaf8 in rb_call (klass=1075662836, recv=1075607976, mid=2969, argc=1, argv=0xbfffdf48, scope=1) at eval.c:5728
#14 0x08059968 in rb_eval (self=1075607976, n=0x76767670) at ruby.h:633
#15 0x0805c8a3 in rb_yield_0 (val=1075607976, self=1075607976, klass=1075608116, flags=4, avalue=0) at eval.c:4707
#16 0x0805fede in yield_under_i (self=1987475056) at eval.c:6267
#17 0x0805fd99 in exec_under (func=0x805feb0 <yield_under_i>, under=1987475056, cbase=0, args=0x401c79a8) at eval.c:6222
#18 0x0805ff16 in yield_under (under=1987475056, self=1987475056) at eval.c:6275
#19 0x080600ca in rb_obj_instance_eval (argc=1987475056, argv=0x76767670, self=1075607976) at eval.c:6355
#20 0x0806a8fa in call_cfunc (func=0x8060090 <rb_obj_instance_eval>, recv=1075607976, len=1024, argc=33, argv=0x0)
    at eval.c:5366
#21 0x0805e847 in rb_call0 (klass=1075678356, recv=1075607976, id=4073, oid=1987475056, argc=0, argv=0x0, body=0x401d6cc8, 
    nosuper=0) at eval.c:5507
#22 0x0805eaf8 in rb_call (klass=1075678356, recv=1075607976, mid=4073, argc=0, argv=0x0, scope=0) at eval.c:5728
#23 0x08059968 in rb_eval (self=1075673536, n=0x76767670) at ruby.h:633
#24 0x08058d18 in rb_eval (self=1075673536, n=0x76767670) at eval.c:2921
#25 0x08055e9d in ruby_exec_internal () at eval.c:1457
#26 0x08055eb6 in ruby_exec () at eval.c:1475
#27 0x08055f00 in ruby_run () at eval.c:1492
#28 0x08053f15 in main (argc=1987475056, argv=0x76767670, envp=0xbffff8e4) at main.c:38
(gdb) 
-- 
[田中 哲][たなか あきら][Tanaka Akira]