Certain inputs cause tight C-level recursion leading to process stack overflow
该报告还没有中文解读。
原文摘录
摘自原文(3034 字符中的一小部分)
Certain legal Ruby programs can cause a tight recursion on the C-level (without using `eval`) while spending very little of the Ruby-level stack. This precludes triggering a Ruby stack overflow exception and eventually leads to a process stack overflow and a segfault. Both vanilla mruby and mruby …
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 shopify-scripts 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @dkasak · 版权归作者与 shopify-scripts 所有