1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00

* eval_method.c (rb_get_method_body): ent->method may be freed by

GC.  [ruby-dev:31819]

* thread.c (remove_event_hook): should not access freed memory.
  [ruby-dev:31820]

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@15654 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
matz 2008-03-01 03:36:33 +00:00
parent 32c4aa1d14
commit 207b8292ba
4 changed files with 19 additions and 11 deletions

View file

@ -1,3 +1,11 @@
Sat Mar 1 12:15:42 2008 Yukihiro Matsumoto <matz@ruby-lang.org>
* eval_method.c (rb_get_method_body): ent->method may be freed by
GC. [ruby-dev:31819]
* thread.c (remove_event_hook): should not access freed memory.
[ruby-dev:31820]
Sat Mar 01 10:31:19 2008 NARUSE, Yui <naruse@ruby-lang.org>
* io.c (read_all, rb_io_getline_fast): encoding is io_input_encoding.

View file

@ -29,11 +29,6 @@ assert_equal 'ok', %q{
C.new.foo
}, '[ruby-core:14813]'
# test is not written...
flunk '[ruby-dev:31819] rb_clear_cache_by_class'
flunk '[ruby-dev:31820] valgrind set_trace_func'
flunk '[ruby-dev:32746] Invalid read of size 1'
assert_equal 'ok', %q{
class X < RuntimeError;end
x = [X]

View file

@ -11,6 +11,7 @@ struct cache_entry { /* method hash table. */
ID mid; /* method's id */
ID mid0; /* method's original id */
VALUE klass; /* receiver's class */
VALUE oklass; /* original's class */
NODE *method;
};
@ -46,7 +47,7 @@ rb_clear_cache_for_undef(VALUE klass, ID id)
ent = cache;
end = ent + CACHE_SIZE;
while (ent < end) {
if (ent->method && ent->method->nd_clss == klass && ent->mid == id) {
if (ent->oklass == klass && ent->mid == id) {
ent->mid = 0;
}
ent++;
@ -84,8 +85,7 @@ rb_clear_cache_by_class(VALUE klass)
ent = cache;
end = ent + CACHE_SIZE;
while (ent < end) {
if ((ent->klass == klass) ||
(ent->method && ent->method->nd_clss == klass)) {
if (ent->klass == klass || ent->oklass == klass) {
ent->mid = 0;
}
ent++;
@ -250,6 +250,7 @@ rb_get_method_body(VALUE klass, ID id, ID *idp)
ent->klass = klass;
ent->mid = ent->mid0 = id;
ent->method = 0;
ent->oklass = 0;
return 0;
}
@ -263,6 +264,7 @@ rb_get_method_body(VALUE klass, ID id, ID *idp)
ent->mid = id;
ent->mid0 = fbody->nd_oid;
ent->method = body = method;
ent->oklass = method->nd_clss;
}
else {
body = method;

View file

@ -2757,9 +2757,10 @@ rb_add_event_hook(rb_event_hook_func_t func, rb_event_flag_t events, VALUE data)
static int
remove_event_hook(rb_event_hook_t **root, rb_event_hook_func_t func)
{
rb_event_hook_t *prev = NULL, *hook = *root;
rb_event_hook_t *prev = NULL, *hook = *root, *next;
while (hook) {
next = hook->next;
if (func == 0 || hook->func == func) {
if (prev) {
prev->next = hook->next;
@ -2769,8 +2770,10 @@ remove_event_hook(rb_event_hook_t **root, rb_event_hook_func_t func)
}
xfree(hook);
}
prev = hook;
hook = hook->next;
else {
prev = hook;
}
hook = next;
}
return -1;
}