diff options
author | nobu <nobu@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2015-07-16 05:18:40 +0000 |
---|---|---|
committer | nobu <nobu@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2015-07-16 05:18:40 +0000 |
commit | aab3599daea682898556c2b54a43a9cef07c5ce3 (patch) | |
tree | 33d97105e05b0d5b2a4ae8f2c3226f54b91cd6da /vm.c | |
parent | e981a61c53d5254139240829446eefb13b56a67b (diff) |
vm.c: fix mark with rewinding cfp
* vm.c (m_core_hash_merge_ptr): copy the arguments to the machine
stack before rewinding the control frame pointer and leaving the
arguments outside valid region of the value stack.
[ruby-core:69969] [Bug #11352]
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@51263 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'vm.c')
-rw-r--r-- | vm.c | 11 |
1 files changed, 9 insertions, 2 deletions
@@ -2400,6 +2400,7 @@ static VALUE core_hash_merge_ary(VALUE hash, VALUE ary) { core_hash_merge(hash, RARRAY_LEN(ary), RARRAY_CONST_PTR(ary)); + RB_GC_GUARD(ary); return hash; } @@ -2407,8 +2408,14 @@ static VALUE m_core_hash_merge_ptr(int argc, VALUE *argv, VALUE recv) { VALUE hash = argv[0]; - - REWIND_CFP(core_hash_merge(hash, argc-1, argv+1)); + VALUE *args; + + --argc; ++argv; + VM_ASSERT(argc <= 256); + args = ALLOCA_N(VALUE, argc); + MEMCPY(args, argv, VALUE, argc); + argv = args; + REWIND_CFP(core_hash_merge(hash, argc, argv)); return hash; } |