From 1a3b32343ed9ebf287ae5a0f241877728e62bea5 Mon Sep 17 00:00:00 2001 From: "Yukihiro \"Matz\" Matsumoto" Date: Tue, 27 Jun 2017 22:29:24 +0900 Subject: Copy argv from VM stack to avoid use-after-free; fix #3722 --- src/class.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/class.c') diff --git a/src/class.c b/src/class.c index 0eea9b4dc..99ad14d81 100644 --- a/src/class.c +++ b/src/class.c @@ -902,7 +902,9 @@ mrb_get_args(mrb_state *mrb, const char *format, ...) if (argc > i) { *pl = argc-i; if (*pl > 0) { - *var = ARGV + arg_i; + mrb_value args = mrb_ary_new_from_values(mrb, *pl, ARGV+arg_i); + RARRAY(args)->c = NULL; + *var = (mrb_value*)RARRAY_PTR(args); } i = argc; arg_i += *pl; -- cgit v1.2.3