tarantool / luajit / 7799100654

89%

tarantool/master: 93%

push

github

Fix unsinking of IR_FSTORE for NULL metatable.

Reported by pwnhacker0x18.

(cherry picked from commit 85b4fed0b)

The `FSTORE` restoring of a sunk table from a snapshot for
`IRFL_TAB_META` misses the case when the second argument of
`setmetatable()` is `nil` (so, the `FSTORE` second operand is `NULL`).
This may lead to the corresponding assertion failure in the
`snap_replay_const()` or the crash.

This patch handles the aforementioned case.

Sergey Kaplun:
* added the description and the test for the problem

Part of tarantool/tarantool#9595

5407 of 5999 branches covered (0.0%)

Branch coverage included in aggregate %.

20712 of 23374 relevant lines covered (88.61%)

2741459.85 hits per line