[perl #130256] heap-use-after-free Perl_sv_setpv_bufsize (sv.c:4956)

On Sun, 04 Dec 2016 16:20:22 -0800, tonyc wrote:
> On Sun, 04 Dec 2016 01:53:36 -0800, brian.carpenter@gmail.com wrote:
> > Triggered with Perl v5.25.7-26-g7332835.
> >
> > ./perl -e '@0=$0|=*0=H     or()'

Simplifies to:

 ./perl -e '$0|=*0="H"'

> This looks like another stack-not-refcounted issue.

And so it is, now public.

Tony



---
via perlbug:  queue: perl5 status: open
https://rt.perl.org/Ticket/Display.html?id=130256

• [perl #130256] heap-use-after-free Perl_sv_setpv_bufsize (sv.c:4956) by Tony Cook via RT
• Re: [perl #130256] heap-use-after-free Perl_sv_setpv_bufsize(sv.c:4956) by demerphq
• Re: [perl #130256] heap-use-after-free Perl_sv_setpv_bufsize(sv.c:4956) by Dave Mitchell
• Re: [perl #130256] heap-use-after-free Perl_sv_setpv_bufsize(sv.c:4956) by demerphq
• Re: [perl #130256] heap-use-after-free Perl_sv_setpv_bufsize(sv.c:4956) by Dave Mitchell
• Re: [perl #130256] heap-use-after-free Perl_sv_setpv_bufsize(sv.c:4956) by Tony Cook