mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
641e384341
Tag string shared roots to fix use-after-free The buffer deduplication codepath in rb_fstring can be used to free the buffer of shared string roots, which leads to use-after-free. Introudce a new flag to tag strings that at one point have been a shared root. Check for it in rb_fstring to avoid freeing buffers that are shared by multiple strings. This change is based on nobu's idea in [ruby-core:94838]. The included test case test for the sequence of calls to internal functions that lead to this bug. See attached ticket for Ruby level repros. [Bug #16151] git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_6@67804 b2dd03c8-39d4-4d8f-98ff-823fe69b080e |
||
|---|---|---|
| .. | ||
| test_capacity.rb | ||
| test_coderange.rb | ||
| test_cstr.rb | ||
| test_ellipsize.rb | ||
| test_enc_associate.rb | ||
| test_enc_str_buf_cat.rb | ||
| test_external_new.rb | ||
| test_fstring.rb | ||
| test_modify_expand.rb | ||
| test_nofree.rb | ||
| test_normalize.rb | ||
| test_qsort.rb | ||
| test_rb_str_dup.rb | ||
| test_set_len.rb | ||