summaryrefslogtreecommitdiffhomepage
path: root/include
diff options
context:
space:
mode:
authorYukihiro "Matz" Matsumoto <[email protected]>2020-09-01 18:06:49 +0900
committerYukihiro "Matz" Matsumoto <[email protected]>2020-10-12 18:20:10 +0900
commit4cf1da9542d6554ec23de6324c5f2d5eebe138c9 (patch)
treeecaa1f4ecd92243e2a6939a10ee02c25c494429e /include
parentb01207ea94095bc855b8e6fef0dc65d7eae0d8ad (diff)
downloadmruby-4cf1da9542d6554ec23de6324c5f2d5eebe138c9.tar.gz
mruby-4cf1da9542d6554ec23de6324c5f2d5eebe138c9.zip
Separate jump destination check in `OP_R_RETURN`.
In the past code, the current `callinfo (ci)` was modified, thus it was possible to pop `ci` beyond the `cibase`, that could cause out of memory bound access for the code like the following: ```ruby def m2 lambda { Proc.new { return :return # return from the method } }.call.call :never_reached end p m2 ```
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions