Bug #1329: Ruby 1.8.8 で "p eval('0' + '+0.1'*n)" が Segmentation Fault を発生させる

• Status: Closed
• Assignee: wyhaines (Kirk Haines)
• Target version: -
• ruby -v: ruby 1.8.8dev (2009-03-19) [i386-darwin9.6.0]
• Backport: 2.5: UNKNOWN, 2.6: UNKNOWN

[mrkn (Kenta Murata)]

=begin
"p eval('0' + '+0.1'*n)" を評価すると、
n がある値 N1 を超えたときに TypeError が、
N2 を超えたときに Segmentation Fault が発生します。
N1 と N2 がアーキテクチャに依存するかどうかは調べてません。

$ ~/ruby-1.8.8-r23009/bin/ruby -ve "p eval('0'+'+0.1'*4581)"
ruby 1.8.8dev (2009-03-19) [i386-darwin9.6.0]
458.100000000036
$ ~/ruby-1.8.8-r23009/bin/ruby -ve "p eval('0'+'+0.1'*4582)"
ruby 1.8.8dev (2009-03-19) [i386-darwin9.6.0]
-e:1: can't modify frozen string (TypeError)
$ ~/ruby-1.8.8-r23009/bin/ruby -ve "p eval('0'+'+0.1'*5132)"
ruby 1.8.8dev (2009-03-19) [i386-darwin9.6.0]
-e:1: can't modify frozen string (TypeError)
$ ~/ruby-1.8.8-r23009/bin/ruby -ve "p eval('0'+'+0.1'*5133)"
ruby 1.8.8dev (2009-03-19) [i386-darwin9.6.0]
Segmentation fault

eval しなければ TypeError も SEGV も発生しないことは確認済です。

$ ~/ruby-1.8.8-r23009/bin/ruby -ve "'0'+'+0.1'*5133"
ruby 1.8.8dev (2009-03-19) [i386-darwin9.6.0]
-e:1: warning: useless use of + in void context
=end

[mrkn (Kenta Murata)]

=begin
古いリビジョンで試していたことに気付いて、最新のリビジョンでもう一度やってみました。
その結果、以下に示すように、症状は変わっていませんでした。

$ ~/ruby-1.8.8-r23088/bin/ruby -ve "p eval('0'+'+0.1'*4581)"
ruby 1.8.8dev (2009-03-28) [i386-darwin9.6.0]
458.100000000036
$ ~/ruby-1.8.8-r23088/bin/ruby -ve "p eval('0'+'+0.1'*4582)"
ruby 1.8.8dev (2009-03-28) [i386-darwin9.6.0]
-e:1: can't modify frozen string (TypeError)
$ ~/ruby-1.8.8-r23088/bin/ruby -ve "p eval('0'+'+0.1'*5132)"
ruby 1.8.8dev (2009-03-28) [i386-darwin9.6.0]
-e:1: can't modify frozen string (TypeError)
$ ~/ruby-1.8.8-r23088/bin/ruby -ve "p eval('0'+'+0.1'*5133)"
ruby 1.8.8dev (2009-03-28) [i386-darwin9.6.0]
Segmentation fault

$ ~/ruby-1.8.8-r23088/bin/ruby -ve "'0'+'+0.1'*5133"
ruby 1.8.8dev (2009-03-28) [i386-darwin9.6.0]
-e:1: warning: useless use of + in void context
=end

[nobu (Nobuyoshi Nakada)]

• Status changed from Open to Closed
• % Done changed from 0 to 100

=begin
Applied in changeset r23096.
=end

[shyouhei (Shyouhei Urabe)]

• Status changed from Closed to Open
• Assignee set to shyouhei (Shyouhei Urabe)

=begin

=end

[shyouhei (Shyouhei Urabe)]

• Assignee changed from shyouhei (Shyouhei Urabe) to wyhaines (Kirk Haines)

=begin
1.8.6 also has this problem.
=end

[shyouhei (Shyouhei Urabe)]

• Status changed from Open to Assigned

=begin

=end

[jeremyevans0 (Jeremy Evans)]

• Tracker changed from Backport to Bug
• Project changed from Backport186 to Ruby master
• Description updated (diff)
• Status changed from Assigned to Closed
• ruby -v set to ruby 1.8.8dev (2009-03-19) [i386-darwin9.6.0]
• Backport set to 2.5: UNKNOWN, 2.6: UNKNOWN