Ruby Issue Tracking System

11/10/2017

08:20 PM Ruby Bug #14100 (Closed): segfault in vm_exec during compile

While attempting to compile Ruby `e16bd0f` on Ubuntu 17.04 x64 with afl-clang-fast, which is just a wrapper for clang version 6.0.0 (trunk 315613), a wild segfault appeared.
ASAN_OPTIONS=detect_leaks=0 AFL_PATH=/root/afl-2.51b CC=afl... geeknik (Brian Carpenter)

06:18 PM Ruby Bug #14099 (Closed): heap-use-after-free (WRITE of size 8) in rb_obj_write (include/ruby/ruby.h:1484)

The following script triggers a heap-use-after-free in 3527c86. I compiled it with Clang 6.0.0-trunk and -fsanitize=address. Note, on my Ubuntu machine, this bug is only triggered with the miniruby binary.
~~~ ruby
def a
yield
... geeknik (Brian Carpenter)

04/12/2015

12:12 AM Ruby Bug #10957: seg fault in ruby_yyparse () at parse.y:2105 (null ptr / stack overflow)

This bug is still present in ruby 2.3.0dev (2015-04-11 trunk 50237) [x86_64-linux]. The test case in this instance is 6 bytes. Running ruby -e '0..%w.' should trigger it.
test00-min:1: unterminated string meets end of file
Program ... geeknik (Brian Carpenter)

03/10/2015

05:14 AM Ruby Bug #10957 (Closed): seg fault in ruby_yyparse () at parse.y:2105 (null ptr / stack overflow)

Built ruby 2.3.0dev (2015-03-07 trunk 49885) [x86_64-linux] from git source earlier this evening. This bug was found with american fuzzy lop (http://lcamtuf.coredump.cx/afl) and was compiled as follows:
CC=afl-gcc ./configure && AFL_H... geeknik (Brian Carpenter)