Fix length calculation for Array#slice!
Commit 4f24255 introduced a bug which allows a length to be passed to rb_ary_new4 which is too large, resulting in invalid memory access. For example: (1..1000).to_a.slice!(-2, 1000)
This commit is contained in:
parent
7e36b91526
commit
d43279edac
Notes:
git
2021-08-29 09:41:56 +09:00
Loading…
x
Reference in New Issue
Block a user