ruby-dev

次のようにすると core を吐きます。

% ruby -e '
str = "a" * 0x20000
str.gsub!(/a*/) { callcc {|k| $k = k }; "b" }
$k.call
'
zsh: segmentation fault (core dumped)  ruby -e 
% gdb ruby core 
GNU gdb 6.1-debian
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-linux"...Using host libthread_db library "/lib/libthread_db.so.1".

Core was generated by `ruby -e 
str = "a" * 0x20000
str.gsub!(/a*/) { callcc {|k| $k = k }; "b" }
$k.c'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libcrypt.so.1...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
#0  0x400e7282 in mallopt () from /lib/libc.so.6
(gdb) bt
#0  0x400e7282 in mallopt () from /lib/libc.so.6
#1  0x400e607f in free () from /lib/libc.so.6
#2  0x08070811 in obj_free (obj=131800) at gc.c:1190
#3  0x08070648 in gc_sweep () at gc.c:1063
#4  0x08070a90 in garbage_collect () at gc.c:1392
#5  0x0806f835 in rb_newobj () at gc.c:387
#6  0x080b313b in st_foreach (table=0x1, func=0x401c7c14, arg=3221217448) at st.c:506
#7  0x080b3327 in rb_str_new2 (
    ptr=0x80b313b "覲\205t晞\r", '\220' <repeats 13 times>, "\211]\213[\f\210\213E\211\205t\034\213C\f\213U\211B\f\213[\f\211\f$k\005O\bc\213W\f\213C\f\211\004蛾\220\215&") at string.c:92
#8  0x080b33b0 in rb_tainted_str_new2 (ptr=0x815a350 "F\035@i!") at string.c:110
#9  0x08059d9c in rb_eval (self=1075673496, n=0x815a350) at ruby.h:664
#10 0x0805c1f3 in rb_yield_0 (val=1075608196, self=1075673496, klass=1075608616, flags=0, avalue=0) at eval.c:4693
#11 0x0805c6d9 in rb_yield (val=135635792) at eval.c:4791
#12 0x080b621c in str_gsub (argc=0, argv=0x1, str=1075608356, bang=1) at string.c:2025
#13 0x080b6578 in str_gsub (argc=-1073747144, argv=0x401c7b24, str=1075608356, bang=135112513) at string.c:2078
#14 0x08069f5a in call_cfunc (func=0x80b3a40 <rb_str_plus>, recv=1075608376, len=134258808, argc=135503992, argv=0x1)
    at eval.c:5365
#15 0x0805e167 in rb_call0 (klass=1075668876, recv=1075608356, id=4639, oid=135635792, argc=1, argv=0xbfffeb38, 
    body=0x401d5d14, nosuper=0) at eval.c:5509
#16 0x0805e418 in rb_call (klass=1075668876, recv=1075608356, mid=4639, argc=1, argv=0xbfffeb38, scope=0) at eval.c:5730
#17 0x08059348 in rb_eval (self=1075673496, n=0x815a350) at ruby.h:635
#18 0x080586f8 in rb_eval (self=1075673496, n=0x815a350) at ruby.h:643
#19 0x080558db in ruby_exec () at eval.c:1468
#20 0x08055920 in ruby_stop () at eval.c:1474
#21 0x080539e5 in main (argc=135635792, argv=0x815a350, envp=0xbffff954) at main.c:28
(gdb) 
-- 
[田中 哲][たなか あきら][Tanaka Akira]