diff options
| author | David Mitchell <davem@iabyn.com> | 2010-07-24 15:41:19 +0100 |
|---|---|---|
| committer | David Mitchell <davem@iabyn.com> | 2010-07-24 15:47:57 +0100 |
| commit | e5c69c9b913b1a7f8a83beabb60e96958df29689 (patch) | |
| tree | 4c740a408c1a98fefc38dbea873052d12258deea /hv.h | |
| parent | 87f4ab41b64991a57643a80d84f9ca824fbdb9a4 (diff) | |
| download | perl-e5c69c9b913b1a7f8a83beabb60e96958df29689.tar.gz | |
[perl #76540] "print CONSTANT," gives double-free
gv_init() has name and len args, but newCONSTSUB() (which it calls)
doesn't have a len arg, so any trailing garbage in name gets used by
newCONSTSUB.
In the test case, this means that we end up attaching the const CV
to both the "FOO" and qq{FOO, "\\n";\n} GVs. So it gets freed twice.
Diffstat (limited to 'hv.h')
0 files changed, 0 insertions, 0 deletions