[perl #117941] Handle vivification crashing w/freed stash

open’s handle vivification could crash if the current stash was freed,
so check before passing a freed stash to gv_init.

1 files changed, 3 insertions, 1 deletions

diff --git a/pp.c b/pp.c
index 3eb3cea6af..0367023506 100644
--- a/pp.c
+++ b/pp.c
@@ -237,8 +237,10 @@ S_rv2gv(pTHX_ SV *sv, const bool vivify_sv, const bool strict,
 			Perl_croak_no_modify();
 		    if (cUNOP->op_targ) {
 			SV * const namesv = PAD_SV(cUNOP->op_targ);
+			HV *stash = CopSTASH(PL_curcop);
+			if (SvTYPE(stash) != SVt_PVHV) stash = NULL;
 			gv = MUTABLE_GV(newSV(0));
-			gv_init_sv(gv, CopSTASH(PL_curcop), namesv, 0);
+			gv_init_sv(gv, stash, namesv, 0);
 		    }
 		    else {
 			const char * const name = CopSTASHPV(PL_curcop);