Bug 452810

+++ This bug was initially created as a clone of Bug #452798 +++

Description of problem:
Upstream ruby 1.8.6-p230 introduced a regression that may cause ruby to SEGV
when performing string operations.  See:

http://www.openwall.com/lists/oss-security/2008/06/24/3
https://bugzilla.redhat.com/show_bug.cgi?id=450821#c16

Version-Release number of selected component (if applicable):
ruby-1.8.6.230-1.fc8.x86_64

Steps to Reproduce:
ruby -ve 'str = "A"*(2**16) ; 0.upto(10) { str << str ; puts str.size }'
  
Actual results:
$ ruby -ve 'str = "A"*(2**16) ; 0.upto(10) { str << str ; puts str.size }'
ruby 1.8.6 (2008-06-20 patchlevel 230) [x86_64-linux]
131072
262144
-e:1: [BUG] Segmentation fault
ruby 1.8.6 (2008-06-20) [x86_64-linux]

Aborted


Expected results:
$ ruby -ve 'str = "A"*(2**16) ; 0.upto(10) { str << str ; puts str.size }'
ruby 1.8.6 (2008-03-03 patchlevel 114) [x86_64-linux]
131072
262144
524288
1048576
2097152
4194304
8388608
16777216
33554432
67108864
134217728


Additional info:
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17530 was reported
to resolve this problem.

-- Additional comment from tagoh on 2008-06-25 04:21 EST --
Fixed in 1.8.6.230-2.fc8.

-- Additional comment from updates on 2008-06-25 04:29 EST --
ruby-1.8.6.230-2.fc8 has been submitted as an update for Fedora 8