Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Heap use-after-free in mrb_ary_ref #3547
The following input to mirb demonstrates a crash: 215447.txt
(Note that this input must be supplied to mirb, not mruby.)
This seems to happen because an array allocated on line 54 of the input gets garbage collected too soon.
This issue was reported by https://hackerone.com/ston3