ruby segfaults on class clone

[takahiro watanabe]

Binary package hint: ruby1.8

The bug explained in the blow URL still exist.
Please fix.

http://www.hinet.mydns.jp/tdiary/?date=20090506
(Contents are written in JAPANESE)

Below is the result when I execute the test code in the URL.

takahiro% ruby -ve "C=0; o=''; o.instance_eval('def m; C; end'); o.clone.m"
ruby 1.8.7 (2009-06-12 patchlevel 174) [i486-linux]
(eval):1: [BUG] Segmentation fault
ruby 1.8.7 (2009-06-12 patchlevel 174) [i486-linux]

Aborted

[MattColyer (matt-colyer)]

I can verify that this bug exists in my installation as well.

[Bryan McLellan (btm)]

Upstream bug: http://redmine.ruby-lang.org/issues/show/2326

Upstream contains another test and a possible fix. I can reproduce both the upstream condition and the one in this bug, as well as a third [1] on 9.10 (karmic) with ruby1.8=1.8.7.174-1

[1] http://tickets.opscode.com/browse/CHEF-530

[Lucas Nussbaum (lucas)]

 Bryan, could you please check if the more recent version in Debian is also affected?

[Bryan McLellan (btm)]

tested on ec2:

on lenny / ruby1.8=1.8.7.72-3lenny1 - the above test segfaults, but the Time test upstream works
on squeeze / ruby1.8=1.8.7.174-2 - the above test passes, but the Time test upstream segfaults

domU-12-31-39-04-26-23:~# ruby -e 't1 = t2 = Time.now ; while t1.sec == t2.sec do t2 = Time.now end'
-e:1: [BUG] Segmentation fault
ruby 1.8.7 (2009-06-12 patchlevel 174) [i486-linux]

Aborted
domU-12-31-39-04-26-23:~# apt-cache policy ruby1.8 | grep Installed
  Installed: 1.8.7.174-2
domU-12-31-39-04-26-23:~# lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux testing (squeeze)
Release: testing
Codename: squeeze

[Bryan McLellan (btm)]

http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=22679

[Bryan McLellan (btm)]

The bug reported by OP is fixed in debian in 090812_class_clone_segv.dpatch in =1.8.7.174-2

I can't find an Ruby bug report for it, but I did link the debian bug report. The other issue appears unrelated, and is now filed as LP #488115.

[Martin Pitt (pitti)]

This is reportedly fixed in lucid in 1.8.7.174-2.

[Martin Pitt (pitti)]

Accepted ruby1.8 into karmic-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

[Bryan McLellan (btm)]

Installed ruby1.8 and libruby1.8 version 1.8.7.174-1ubuntu1 from karmic-proposed.

Ran both tests successfully with experiencing a segfault, confirming package in -proposed fixes this bug.

$ ruby -e 't1 = t2 = Time.now ; while t1.sec == t2.sec do t2 = Time.now end'
$ ruby -ve "C=0; o=''; o.instance_eval('def m; C; end'); o.clone.m"
ruby 1.8.7 (2009-06-12 patchlevel 174) [x86_64-linux]
$

[Bryan McLellan (btm)]

My mistake.

*without* a segfault.

Works as expected.

[Launchpad Janitor (janitor)]

This bug was fixed in the package ruby1.8 - 1.8.7.174-1ubuntu1

---------------
ruby1.8 (1.8.7.174-1ubuntu1) karmic-proposed; urgency=medium

  * Added debian/patches/091125_gc_check.dpatch: Avoid segv on gc run whe
    heap fills up with deferred objects. (LP: #488115)
  * Added debian/patches/090812_class_clone_segv.dpatch: avoid segv when an
    object cloned. (LP: #484756)
 -- Bryan McLellan <email address hidden> Tue, 01 Dec 2009 03:33:13 -0800