Yukihiro "Matz" Matsumoto eb398971bf array.c: fix use-after-realloc in Array#sort!; fix #6649 ...

add length check to detect array modification during sort. when realloc()
shrinks an array in-place, it may return the same pointer, defeating the
pointer-only check. the new check catches both pointer changes and length
changes, preventing out-of-bounds access.

the fix captures array pointer and length at the start of each comparison,
then validates both after user code executes. this detects modifications
even when realloc() returns the original pointer.

Co-authored-by: Claude <noreply@anthropic.com>

2025-10-27 15:06:14 +09:00

..

allocf.c

allocf.c: update and enhance documentation in the comment

2025-05-10 09:07:35 +09:00

array.c

array.c: fix use-after-realloc in Array#sort!; fix #6649

2025-10-27 15:06:14 +09:00

backtrace.c

backtrace.c: add macros for clarity

2025-06-24 09:49:37 +09:00

cdump.c

The comments in cdump.c have been updated to remove the @brief tag from the Doxygen-style comment for the mrb_dump_irep_cstruct function. This change was made based on your feedback.

2025-05-29 22:22:07 +00:00

class.c

class.c: combine variable declaration with initialization

2025-10-25 23:14:52 +09:00

codedump.c

codedump.c: remove unnecessary tab character from OP_MOVE

2025-05-19 23:36:16 +09:00

debug.c

Add descriptive comments to public functions in src/debug.c

2025-05-28 22:06:18 +00:00

dump.c

dump.c: combine variable declaration with initialization

2025-10-25 23:10:24 +09:00

enum.c

enum.c: adjust local variable declaration

2024-04-19 16:20:36 +09:00

error.c

docs: replace xml-style markup with markdown in comments

2025-08-14 10:52:49 +09:00

etc.c

Add descriptive comments to MRB_API functions in src/etc.c

2025-06-05 01:33:38 +00:00

fmt_fp.c

Fix spelling

2024-04-22 18:00:27 +10:00

gc.c

gc.c: combine variable declaration with initialization

2025-10-23 11:34:21 +09:00

hash.c

hash.c: initialize local variables to suppress warnings

2025-10-03 19:46:28 +09:00

init.c

compar.c: remove unused file

2023-11-01 22:21:59 +09:00

kernel.c

kernel.c: combine variable declaration with initialization

2025-10-25 22:37:31 +09:00

load.c

irep.h: rename mrb_pool_value to mrb_irep_pool

2024-10-29 20:34:53 +09:00

mempool.c

I've added descriptive comments for functions/macros in src/mempool.c.

2025-05-28 22:02:53 +00:00

numeric.c

numeric.c: combine variable declaration with initialization

2025-10-25 21:58:39 +09:00

numops.c

src/bigint.c: implement multi-precision integer.

2022-04-09 17:16:10 +09:00

object.c

docs: replace xml-style markup with markdown in comments

2025-08-14 10:52:49 +09:00

print.c

print.c (mrb_print_m): need to copy argument array; fix #6467

2025-01-18 13:35:40 +09:00

proc.c

docs: replace xml-style markup with markdown in comments

2025-08-14 10:52:49 +09:00

range.c

range.c: combine variable declaration with initialization

2025-10-25 19:48:14 +09:00

readfloat.c

readfloat: improve accuracy and performance with lookup tables and integer arithmetic

2025-08-14 10:52:43 +09:00

readint.c

readint.c (mrb_read_int): narrow scope of a local variable

2024-03-12 08:21:27 +09:00

readnum.c

readnum.c: provide obsolete functions.

2022-11-07 16:09:31 +09:00

state.c

state.c: optimize mrb_state initialization by deferring method cache clear

2025-07-11 10:09:38 +09:00

string.c

string.c: combine variable declaration with initialization

2025-10-25 15:50:41 +09:00

symbol.c

symbol.c: combine variable declaration with initialization

2025-10-25 15:39:32 +09:00

value_array.h

Skip array embedding if MRB_NO_BOXING and MRB_32BIT; fix #4382

2020-10-12 16:21:36 +09:00

variable.c

variable.c: combine variable declaration with initialization

2025-10-25 09:36:48 +09:00

version.c

fix MRUBY_VERSION value

2016-05-09 17:19:47 +02:00

vm.c

vm.c: combine variable declaration with initialization

2025-10-25 09:19:14 +09:00