tarantool / luajit / 7725316022

89%

tarantool/master: 93%

push

github

Fix unsinking of IR_FSTORE for NULL metatable.

Reported by pwnhacker0x18.

(cherry picked from commit 85b4fed0b)

The `FSTORE` restoring of a sunk table from a snapshot for
`IRFL_TAB_META` misses the case when the second argument of
`setmetatable()` is `nil` (so, the `FSTORE` second operand is `NULL`).
This may lead to the corresponding assertion failure in the
`snap_replay_const()` or the crash.

This patch handles the aforementioned case.

Sergey Kaplun:
* added the description and the test for the problem

Part of tarantool/tarantool#9595

5399 of 5997 branches covered (0.0%)

Branch coverage included in aggregate %.

20694 of 23370 relevant lines covered (88.55%)

2749061.84 hits per line