[perl #129166] null ptr deref, segfault in Perl_pp_subtractpp.c:1894

On Thu Sep 01 21:30:30 2016, sprout wrote:
> On Thu Sep 01 11:56:00 2016, dcollinsn@gmail.com wrote:
> > ./perl -e '$#a=0;0-splice@a'
> >
> > Also segfaults.
> >
> > The root cause of #129164, #129166, and #129167 is almost certainly
> > something in Perl_pp_splice when called on a zero-length array.
> 
> Not zero-length, but one with a single null entry.
> 
> >
> > $ ./perl -Ilib -MDevel::Peek -e '$#a=0; Dump(splice @a);'
> > SV = 0
> >
> > Looks like a good starting point.
> 
> I think splice needs to do the same null checks that other array
> functions do, and push &PL_sv_undef for null.

Now fixed in 92b69f6.

-- 

Father Chrysostomos


---
via perlbug:  queue: perl5 status: open
https://rt.perl.org/Ticket/Display.html?id=129166

• [perl #129166] null ptr deref, segfault in Perl_pp_subtractpp.c:1894 by Father Chrysostomos via RT