1berry/ruby
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

test for [Bug #12670]

Browse Source 
heap corruption by deferred free.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@59116 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
nobu 2017-06-19 14:36:17 +00:00
parent 0a907a3792
commit 263a0f7f16
2 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
ext/-test-/typeddata/typeddata.c
View File

@ -2,8 +2,18 @@
static const rb_data_type_t test_data = { static const rb_data_type_t test_data = {
"typed_data", "typed_data",
{NULL, ruby_xfree, NULL},
NULL, NULL,
0/* deferred free */,
}; };
static VALUE
test_alloc(VALUE klass)
{
char *p;
return TypedData_Make_Struct(klass, char, &test_data, p);
}
static VALUE static VALUE
test_check(VALUE self, VALUE obj) test_check(VALUE self, VALUE obj)
{ {
@ -11,10 +21,24 @@ test_check(VALUE self, VALUE obj)
return obj; return obj;
} }
static VALUE
test_make(VALUE klass, VALUE num)
{
unsigned long i, n = NUM2UINT(num);
for (i = 0; i < n; i++) {
test_alloc(klass);
}
return Qnil;
}
void void
Init_typeddata(void) Init_typeddata(void)
{ {
VALUE mBug = rb_define_module("Bug"); VALUE mBug = rb_define_module("Bug");
VALUE klass = rb_define_class_under(mBug, "TypedData", rb_cData); VALUE klass = rb_define_class_under(mBug, "TypedData", rb_cData);
rb_define_alloc_func(klass, test_alloc);
rb_define_singleton_method(klass, "check", test_check, 1); rb_define_singleton_method(klass, "check", test_check, 1);
rb_define_singleton_method(klass, "make", test_make, 1);
} }

11
test/-ext-/typeddata/test_typeddata.rb
View File

@ -17,4 +17,15 @@ class Test_TypedData < Test::Unit::TestCase
obj = eval("class C\u{1f5ff}; self; end").new obj = eval("class C\u{1f5ff}; self; end").new
assert_raise_with_message(TypeError, /C\u{1f5ff}/) {Bug::TypedData.check(obj)} assert_raise_with_message(TypeError, /C\u{1f5ff}/) {Bug::TypedData.check(obj)}
end end
def test_deferred_free
assert_ruby_status([], "#{<<-"begin;"}\n#{<<-"end;"}")
require "-test-/typeddata"
begin;
n = 1 << 20
Bug::TypedData.make(n)
end;
rescue MiniTest::Assertion => e
skip e.message
end
end end