nobu	2008-07-01 13:19:47 +0900 (Tue, 01 Jul 2008)

  New Revision: 17756

  Modified files:
    branches/ruby_1_8/ChangeLog
    branches/ruby_1_8/array.c
    trunk/ChangeLog
    trunk/array.c

  Log:
    * array.c (rb_ary_fill): check if beg is too big.



  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17756

  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/array.c?r1=17756&r2=17755&diff_format=u
  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8/ChangeLog?r1=17756&r2=17755&diff_format=u
  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/ChangeLog?r1=17756&r2=17755&diff_format=u
  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8/array.c?r1=17756&r2=17755&diff_format=u

Index: array.c
===================================================================
--- array.c	(revision 17755)
+++ array.c	(revision 17756)
@@ -2145,7 +2145,7 @@
 	break;
     }
     rb_ary_modify(ary);
-    if (len > ARY_MAX_SIZE - beg) {
+    if (beg >= ARY_MAX_SIZE || len > ARY_MAX_SIZE - beg) {
 	rb_raise(rb_eArgError, "argument too big");
     }
     end = beg + len;
Index: ChangeLog
===================================================================
--- ChangeLog	(revision 17755)
+++ ChangeLog	(revision 17756)
@@ -1,3 +1,7 @@
+Tue Jul  1 13:19:44 2008  Nobuyoshi Nakada  <nobu@r...>
+
+	* array.c (rb_ary_fill): check if beg is too big.
+
 Tue Jul  1 12:01:16 2008  Koichi Sasada  <ko1@a...>
 
 	* compile.c, insns.def, vm.c, vm_core.h: remove some insns
@@ -12,10 +16,10 @@
 Tue Jul  1 03:28:16 2008  Eric Hodel  <drbrain@s...>
 
 	* test/rubygems/test_ext_configure_builder.rb:  Apply locale-free
-	patch by Yusuke ENDOH.  [ruby-core:17444].
+	  patch by Yusuke ENDOH.  [ruby-core:17444].
 
 	* runruby.rb:  Set ENV['rake'].  Patch by Yusuke ENDOH
-	[ruby-core:17442].
+	  [ruby-core:17442].
 
 Tue Jul  1 01:07:17 2008  Nobuyoshi Nakada  <nobu@r...>
 
Index: ruby_1_8/array.c
===================================================================
--- ruby_1_8/array.c	(revision 17755)
+++ ruby_1_8/array.c	(revision 17756)
@@ -2417,7 +2417,7 @@
 	break;
     }
     rb_ary_modify(ary);
-    if (len > ARY_MAX_SIZE - beg) {
+    if (beg >= ARY_MAX_SIZE || len > ARY_MAX_SIZE - beg) {
 	rb_raise(rb_eArgError, "argument too big");
     }
     end = beg + len;
Index: ruby_1_8/ChangeLog
===================================================================
--- ruby_1_8/ChangeLog	(revision 17755)
+++ ruby_1_8/ChangeLog	(revision 17756)
@@ -1,3 +1,7 @@
+Tue Jul  1 13:19:44 2008  Nobuyoshi Nakada  <nobu@r...>
+
+	* array.c (rb_ary_fill): check if beg is too big.
+
 Tue Jul  1 01:07:17 2008  Nobuyoshi Nakada  <nobu@r...>
 
 	* lib/cgi.rb (CGI::QueryExtension.read_multipart): blanks inside

--
ML: ruby-changes@q...
Info: http://www.atdot.net/~ko1/quickml/