mirror of
https://github.com/mruby/mruby
synced 2026-06-08 16:11:16 +00:00
e50f15c1c6
The JMPNOT-to-JMPIF optimization assumed fail_pos always came from a 4-byte JMPNOT instruction. When a pinned variable is undefined, NODE_PAT_PIN generates a 3-byte OP_JMP instead, causing fail_pos - 2 to point into the previous instruction and corrupt its operand. Add a check to verify the instruction at fail_pos - 2 is actually OP_JMPNOT before modifying it. Fixes #6701 Co-authored-by: Claude <noreply@anthropic.com>