Ruby Issue Tracking System

08/29/2013

12:06 AM Backport200 Backport #8829 (Closed): Segfault in Zlib::Inflate

Repro:
ruby -rzlib -e 'Zlib::Inflate.inflate([0x08,0x3C,0x0,0x0,0x0,0x0].pack("c*"))'
tested on p247, osx... mml (McClain Looney)

08/22/2013

04:14 AM Ruby master Bug #8673: User rest-client PUT request core dumped

I'm seeing regular segfaults along this code path without any fancy ssl-related stuff.
Interestingly, it's blowi... mml (McClain Looney)

08/17/2013

11:16 PM Backport200 Backport #8795: "Null byte in string error" on Marshal.load

nobu (Nobuyoshi Nakada) wrote:
> How was this data generated?
> Using 3rd party's library or something?
The inpu... mml (McClain Looney)

10:30 AM Backport200 Backport #8795: "Null byte in string error" on Marshal.load

No problem, sorry I didn't think of that first. mml (McClain Looney)

06:23 AM Backport200 Backport #8795: "Null byte in string error" on Marshal.load

just verified that this tickles the 2.1 nightly snapshot as well. mml (McClain Looney)

06:21 AM Backport200 Backport #8795: "Null byte in string error" on Marshal.load

also, after hacking string.c, i'm able to Marshal.load this string, but Marshal.dump'ing the result doesn't produce t... mml (McClain Looney)

06:19 AM Backport200 Backport #8795: "Null byte in string error" on Marshal.load

i wish i had something smaller, but i'm unable to reproduce the issue any other way, unfortunately.
FWIW, it's basic... mml (McClain Looney)

02:58 AM Backport200 Backport #8795: "Null byte in string error" on Marshal.load

tracing the load progress by passing a proc to load yields:
loading true
...
loading {nil=>nil}
./show.rb:7:in ... mml (McClain Looney)

01:46 AM Backport200 Backport #8795: "Null byte in string error" on Marshal.load

seems the call to memchr on line 1496 of string.c is returning truthy. The string passed to it is 11 bytes of null (0... mml (McClain Looney)

12:47 AM Backport200 Backport #8795: "Null byte in string error" on Marshal.load

require 'bigdecimal'
class Model< Hash;end
class Product< Hash;end
puts "well, that worked just fine! #{Marshal.lo... mml (McClain Looney)