Ruby Issue Tracking System

Today

08:18 AM Ruby Bug #22436 (Open): Array#zip with a method_missing-based argument leaks a stale block handler (segfault when the next C-called method yields)

The following code:
```rb
o = Object.new
def o.method_missing(*) = nil # Array#zip calls o.each via method_missing
out = Object.new
def out.write(*) = nil
def out.puts(*) = yield # receives a block it was never given
... 0599jiangyc@gmail.com (Yuancheng Jiang)

10/07/2026

11:36 AM Ruby Bug #22412 (Closed): Assertion Failed: vm_ep_in_heap_p_:env->ep == ep

The following code:
```ruby
pr = proc {|a, b| }.curry.dup
pr.call(1)
```
(also `lambda {|a, b| }.curry.clone[1]`, or `define_method(:m, &proc {|a, b| }.curry); m(1)` which dups the proc internally)
Resulted in this output (RU... 0599jiangyc@gmail.com (Yuancheng Jiang)

11:35 AM Ruby Bug #22411 (Closed): Assertion Failed: class_call_alloc_func:rb_obj_class(obj) == rb_class_real(klass)

The following code:
```ruby
class C < File::Stat; end
C.allocate
```
Resulted in this output (RUBY_DEBUG build):
```
../object.c:2310: Assertion Failed: class_call_alloc_func:rb_obj_class(obj) == rb_class_real(klass)
ruby 4... 0599jiangyc@gmail.com (Yuancheng Jiang)

11:34 AM Ruby Bug #22410 (Closed): `IO#external_encoding` / `IO#internal_encoding` segfault on an uninitialized IO

The following code:
```ruby
IO.allocate.external_encoding
```
(also `IO.allocate.internal_encoding`, or any `IO`/`File` subclass whose `initialize` does not call `super`, e.g.
`class A < IO; def initialize(*) = nil; end; A.new.e... 0599jiangyc@gmail.com (Yuancheng Jiang)

11:32 AM Ruby Bug #22409 (Closed): ASan UAF and Assertion Failed: gc_validate_pc:CFP_PC(cfp) >= iseq_encoded: PC not set when allocating, breaking tracing

The following code:
```ruby
pr = proc {|a=1,b=1,c=1,d=1,e=1,f=1,g=1,h=1,i=1,j=1| pr.call }
40.times do |k|
eval((0...k).map { "v#{_1}=0;" }.join + "begin; pr.call; rescue SystemStackError => e; e.backtrace; end")
end
p :survive... 0599jiangyc@gmail.com (Yuancheng Jiang)

09/18/2026

04:27 AM Ruby Bug #22334 (Closed): Assertion Failed: VM_ENV_FLAGS:FIXNUM_P(flags)

The following code:
```ruby
def r; return **[nil]; end; r()
```
Resulted in this output:
```
../vm_core.h:1554: Assertion Failed: VM_ENV_FLAGS:FIXNUM_P(flags)
ruby 4.1.0dev (2026-09-15T05:36:12Z master 3296d5c99c) +PRISM [x86_... 0599jiangyc@gmail.com (Yuancheng Jiang)

04:14 AM Ruby Bug #22333 (Closed): Assertion Failed: ary_resize_capa:RARRAY_LEN(ary) <= capacity

The following program:
```ruby
def assert_raise(*a) = (yield rescue nil)
MIN_SIZE = ENV.fetch('SMALL_ARRAY_MIN', 0).to_i
MAX_SIZE = ENV.fetch('SMALL_ARRAY_MAX', 16).to_i
ITERATIONS = ENV.fetch('SMALL_ARRAY_ITERATIONS', 100).to_i
... 0599jiangyc@gmail.com (Yuancheng Jiang)

09/16/2026

04:20 AM Ruby Bug #22322 (Closed): AddressSanitizer: use-after-poison in econv_description /ruby-src/build/../transcode.c

The following program:
```ruby
ec = Encoding::Converter.new("", "xml_attr_content_escape")
begin ec.dup.freeze; ec.clone(freeze: false); GC.start(full_mark: true, immediate_sweep: true); ObjectSpace.each_object(ec.class).first(50).e... 0599jiangyc@gmail.com (Yuancheng Jiang)

04:16 AM Ruby Bug #22321 (Closed): Assertion Failed: rb_vm_search_method_slowpath:RB_TYPE_2_P(klass, RUBY_T_CLASS, RUBY_T_ICLASS): klass: T_MODULE

The following program:
```ruby
def assert_equal(*a) = nil
bug15629_m1 = Module.new do
def foo; end
end
bug15629_m2 = Module.new do
def foo; end
end
bug15629_c = Class.new do
include bug15629_m1
include bug15629_m2
e... 0599jiangyc@gmail.com (Yuancheng Jiang)