From d10d5a974d81628605cf4d69b9e1a9b13fd43651 Mon Sep 17 00:00:00 2001
From: nobu <nobu@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>
Date: Sun, 13 Dec 2015 09:33:40 +0000
Subject: pack.c: check index range

* pack.c (pack_pack): always check index range against the
  receiver array length, which can be shortened by elements
  conversion.  reported by Marcin 'Icewall' Noga of Cisco Talos.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@53080 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
---
 test/ruby/test_pack.rb | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

(limited to 'test/ruby/test_pack.rb')

diff --git a/test/ruby/test_pack.rb b/test/ruby/test_pack.rb
index 8dbfd95809..d696dd70a1 100644
--- a/test/ruby/test_pack.rb
+++ b/test/ruby/test_pack.rb
@@ -794,4 +794,23 @@ EXPECTED
       }
     }
   end
+
+  def test_pack_resize
+    assert_separately([], <<-'end;')
+      ary = []
+      obj = Class.new {
+        define_method(:to_str) {
+          ary.clear()
+          ary = nil
+          GC.start
+          "TALOS"
+        }
+      }.new
+
+      ary.push(obj)
+      ary.push(".")
+
+      assert_raise_with_message(ArgumentError, /too few/) {ary.pack("AA")}
+    end;
+  end
 end
-- 
cgit v1.2.3