Re: An heap-use-after-free is triggered in the insertkey()

------=_Part_58936_1379709188.1783707357322
Content-Type: multipart/alternative; 
	boundary="----=_Part_58937_1860647858.1783707357322"

------=_Part_58937_1860647858.1783707357322
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello, Roberto,

On Friday, July 10, 2026 at 7:19:32=E2=80=AFPM UTC+3 Roberto Ierusalimschy =
wrote:

<snipped>

=20

I've finally got some time to debug that, and it is a real bug!=20


This is very cool!
=20
<snipped>=20


Sergey, was this bug found by OSS-Fuzz?=20

=20
Yes, it's from there.


-- Roberto=20

--=20
You received this message because you are subscribed to the Google Groups "=
lua-l" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/lua-l/e0c7f=
a78-b9b4-4c35-8a72-6595402d5edan%40googlegroups.com.

------=_Part_58937_1860647858.1783707357322
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello, Roberto,<br /><br /><div><div dir=3D"auto">On Friday, July 10, 2026 =
at 7:19:32=E2=80=AFPM UTC+3 Roberto Ierusalimschy wrote:</div><blockquote s=
tyle=3D"margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204=
); padding-left: 1ex;">&lt;snipped&gt;<br /></blockquote><div>=C2=A0</div><=
blockquote style=3D"margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(2=
04, 204, 204); padding-left: 1ex;">I've finally got some time to debug that=
, and it is a real bug!
<br /></blockquote><div><br /></div><div><span lang=3D"en"><span><span>This=
 is very cool!</span></span></span></div><div>=C2=A0</div><div>&lt;snipped&=
gt;=C2=A0</div><blockquote style=3D"margin: 0px 0px 0px 0.8ex; border-left:=
 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<br />Sergey, was this bug found by OSS-Fuzz?
<br /></blockquote><div>=C2=A0</div><div><span lang=3D"en"><span><span>Yes,=
 it's from there.</span></span></span></div><div><span lang=3D"en"><span><s=
pan><br /></span></span></span></div><blockquote style=3D"margin: 0px 0px 0=
px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<br />-- Roberto
<br />
<br /></blockquote></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;lua-l&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">lua-l+unsubsc=
[email protected]</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/d/msgid/=
lua-l/e0c7fa78-b9b4-4c35-8a72-6595402d5edan%40googlegroups.com?utm_medium=
=3Demail&utm_source=3Dfooter">https://groups.google.com/d/msgid/lua-l/e0c7f=
a78-b9b4-4c35-8a72-6595402d5edan%40googlegroups.com</a>.<br />

------=_Part_58937_1860647858.1783707357322--

------=_Part_58936_1379709188.1783707357322--