diff options
author | Peter Zhu <[email protected]> | 2024-12-16 11:41:41 -0500 |
---|---|---|
committer | Peter Zhu <[email protected]> | 2024-12-16 12:24:24 -0500 |
commit | 516a6cd1ad620b880651c1333bd856a9d7dec3c4 (patch) | |
tree | c27c7b4f538b0a751f47498ad380c16c2eaec1f7 /gc.c | |
parent | 960f971ac86e0d171fbc3df12bda8c6c81d3ae29 (diff) |
Check whether object is valid in allocation_info_tracer_compact
When reference updating ObjectSpace.trace_object_allocations, we need to
check whether the object is valid or not because it does not mark the
object so the object may be dead. This can cause a segmentation fault
if the object is on a free heap page.
For example, the following script crashes:
require "objspace"
objs = []
ObjectSpace.trace_object_allocations do
1_000_000.times do
objs << Object.new
end
end
objs = nil
# Free pages that the objs were on
GC.start
# Run compaction and check that it doesn't crash
GC.compact
Notes
Notes:
Merged: https://github.com/ruby/ruby/pull/12360
Diffstat (limited to 'gc.c')
-rw-r--r-- | gc.c | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -1724,6 +1724,12 @@ rb_objspace_garbage_object_p(VALUE obj) return rb_gc_impl_garbage_object_p(rb_gc_get_objspace(), obj); } +bool +rb_gc_pointer_to_heap_p(VALUE obj) +{ + return rb_gc_impl_pointer_to_heap_p(rb_gc_get_objspace(), (void *)obj); +} + /* * call-seq: * ObjectSpace._id2ref(object_id) -> an_object |