Check the argument size

Ensure that argument array size does not overflow as `int`, before
cast in thread_do_start after new thread created.

1 files changed, 1 insertions, 0 deletions

diff --git a/thread.c b/thread.c
index 66e3f8a7b1..9301e41696 100644
--- a/thread.c
+++ b/thread.c
@@ -842,6 +842,7 @@ thread_create_core(VALUE thval, VALUE args, VALUE (*fn)(void *))
         th->invoke_arg.func.arg = (void *)args;
     }
     else {
+        (void)RARRAY_LENINT(args);
         th->invoke_type = thread_invoke_type_proc;
         th->invoke_arg.proc.proc = rb_block_proc();
         th->invoke_arg.proc.args = args;