Re: An heap-use-after-free is triggered in the insertkey()

> [...]
> 
> Interesting bug.
> 
> I guess we should call  luaC_barrierback() directly here instead of
> luaV_finishfastset(), and call  gcvalue(t) before luaV_fastset()

That's my general idea, but there is a catch. We can only call gcvalue
if the value is collectable, and the test is currently inside luaV_fastset.
So, we probably will have to "expand" luaV_fastset, too.

-- Roberto

-- 
You received this message because you are subscribed to the Google Groups "lua-l" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/lua-l/20260712133000.GA106587%40arraial.inf.puc-rio.br.