diff options
| author | rhe <rhe@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2016-09-13 07:08:15 +0000 |
|---|---|---|
| committer | rhe <rhe@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2016-09-13 07:08:15 +0000 |
| commit | c49e0df2d7b3b69e3d7ce2ef8a277915b3e3c84c (patch) | |
| tree | 5a7f9660f2cc01ee433189d809d975e59e2b1a58 /marshal.c | |
| parent | 5bc61ceddec4f15b407b0fa8e435f816355d5506 (diff) | |
| download | ruby-c49e0df2d7b3b69e3d7ce2ef8a277915b3e3c84c.tar.gz | |
string.c: fix buffer overflow check condition in rb_str_set_len()
* string.c (rb_str_set_len): The buffer overflow check is wrong. The
space for termlen is allocated outside the capacity returned by
rb_str_capacity(). This fixes r41920 ("string.c: multi-byte
terminator", 2013-07-11). [ruby-core:77257] [Bug #12757]
* test/-ext-/string/test_set_len.rb (test_capacity_equals_to_new_size):
Test for this change. Applying only the test will trigger [BUG].
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@56148 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'marshal.c')
0 files changed, 0 insertions, 0 deletions