mirror of
https://github.com/mruby/mruby
synced 2026-06-08 16:11:16 +00:00
1c7a0d4e96
the keyword argument handling code was checking if kdict is not nil before calling mrb_hash_size(), but didn't verify it's actually a hash. malformed bytecode could cause a non-hash value to be stored in the keyword dictionary register, leading to a NULL pointer dereference in h_size(). add mrb_hash_p() check to prevent the crash. Co-authored-by: Claude <noreply@anthropic.com>