[ruby-dev:24901] Array#delete causes core dump again

次のようにすると core を吐きます。

% ./ruby -e '
arr = [0] * 100
o = Object.new
arr2 = nil
class << o; self end.send(:define_method, :==) {|v|
  arr.freeze
  arr2 = arr.dup
  true
}
arr << o
arr.delete(0)
p arr
p arr2
'
[]
-e:13: [BUG] Segmentation fault
ruby 1.9.0 (2004-11-17) [i686-linux]

zsh: abort (core dumped)  ./ruby -e 
% gdb ruby core 
GNU gdb 6.1-debian
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-linux"...Using host libthread_db library "/lib/libthread_db.so.1".

Core was generated by `./ruby -e 
arr = [0] * 100
o = Object.new
arr2 = nil
class << o; self end.send('.
Program terminated with signal 6, Aborted.
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libcrypt.so.1...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
#0  0x4009e6b1 in kill () from /lib/libc.so.6
(gdb) bt
#0  0x4009e6b1 in kill () from /lib/libc.so.6
#1  0x4009e435 in raise () from /lib/libc.so.6
#2  0x4009f978 in abort () from /lib/libc.so.6
#3  0x080d5436 in rb_bug (fmt=0x0) at error.c:214
#4  0x080b2492 in sigsegv (sig=11) at signal.c:446
#5  <signal handler called>
#6  rb_funcall (recv=52, mid=52, n=0) at ruby.h:644
#7  0x080870a6 in rb_inspect (obj=52) at object.c:345
#8  0x080c86c1 in inspect_ary (ary=1075607216) at array.c:1559
#9  0x080c8408 in inspect_call (arg=0x401c76b0) at array.c:1478
#10 0x0805dba9 in rb_ensure (b_proc=0x80c83f0 <inspect_call>, data1=3221220288, e_proc=0x80c84f0 <inspect_ensure>, 
    data2=1075607216) at eval.c:5194
#11 0x080c85af in rb_protect_inspect (func=0x80c8600 <inspect_ary>, obj=1075607216, arg=0) at array.c:1535
#12 0x080c8786 in rb_ary_inspect (ary=1075607216) at array.c:1582
#13 0x0806a911 in call_cfunc (func=0x80c8730 <rb_ary_inspect>, recv=1075607216, len=1075607216, argc=0, argv=0x0)
    at eval.c:5388
#14 0x0805e852 in rb_call0 (klass=1075647656, recv=1075607216, id=3169, oid=52, argc=0, argv=0x0, body=0x401d13a4, 
    nosuper=0) at eval.c:5526
#15 0x0805eb08 in rb_call (klass=1075647656, recv=1075607216, mid=3169, argc=0, argv=0x0, scope=1) at eval.c:5747
#16 0x0805ee84 in rb_funcall (recv=1075607216, mid=52, n=0) at ruby.h:635
#17 0x080870a6 in rb_inspect (obj=52) at object.c:345
#18 0x0807aa11 in rb_p (obj=52) at io.c:3744
#19 0x0807aac2 in rb_f_p (argc=1, argv=0xbffff0e8) at io.c:3774
#20 0x0806a90a in call_cfunc (func=0x807aa50 <rb_f_p>, recv=1075673536, len=1075607216, argc=0, argv=0xbffff0e8)
    at eval.c:5385
#21 0x0805e852 in rb_call0 (klass=1075678356, recv=1075673536, id=7417, oid=52, argc=1, argv=0xbffff0e8, body=0x401cea64, 
    nosuper=0) at eval.c:5526
#22 0x0805eb08 in rb_call (klass=1075678356, recv=1075673536, mid=7417, argc=1, argv=0xbffff0e8, scope=1) at eval.c:5747
#23 0x080598ca in rb_eval (self=1075673536, n=0x34) at ruby.h:635
#24 0x08055e1d in ruby_exec_internal () at eval.c:1465
#25 0x08055e36 in ruby_exec () at eval.c:1483
#26 0x08055e80 in ruby_run () at eval.c:1500
#27 0x08053e85 in main (argc=52, argv=0x34, envp=0xbffff8f4) at main.c:38
(gdb) 
-- 
[田中 哲][たなか あきら][Tanaka Akira]