Fixed heap buffer overflow in mrb_ary_unshift_m; fix #3760

This commit is contained in:
Yukihiro "Matz" Matsumoto
2017-08-05 01:18:52 +09:00
parent 36dbfd9bda
commit 006661394d
+2 -2
View File
@@ -584,8 +584,8 @@ mrb_ary_unshift_m(mrb_state *mrb, mrb_value self)
}
array_copy(ptr, vals, alen);
ARY_SET_LEN(a, len+alen);
while (len--) {
mrb_field_write_barrier_value(mrb, (struct RBasic*)a, vals[len]);
while (alen--) {
mrb_field_write_barrier_value(mrb, (struct RBasic*)a, vals[alen]);
}
return self;