mirror of
https://github.com/mruby/mruby
synced 2026-06-08 16:11:16 +00:00
72c117cb9e
mrb_sym_name_len() returns NULL when sym is 0, out of range, or references a freed symbol slot. assign_class_name() indexed [0] without checking, so malformed bytecode whose OP_CLASS operand indexed past irep->slen could feed a bogus sym here and crash on NULL[0]. Skip the class-naming side effect when the sym does not resolve to a name. close #6842 Co-authored-by: Claude <noreply@anthropic.com>