tarantool / luajit / 7804005267

70%

tarantool/master: 93%

push

github

Fix unsinking of IR_FSTORE for NULL metatable.

Reported by pwnhacker0x18.

(cherry picked from commit 85b4fed0b)

The `FSTORE` restoring of a sunk table from a snapshot for
`IRFL_TAB_META` misses the case when the second argument of
`setmetatable()` is `nil` (so, the `FSTORE` second operand is `NULL`).
This may lead to the corresponding assertion failure in the
`snap_replay_const()` or the crash.

This patch handles the aforementioned case.

Sergey Kaplun:
* added the description and the test for the problem

Part of tarantool/tarantool#9595

Reviewed-by: Maxim Kokryashkin <m.kokryashkin@tarantool.org>
Reviewed-by: Sergey Bronnikov <sergeyb@tarantool.org>
Signed-off-by: Igor Munkin <imun@tarantool.org>
(cherry picked from commit 38f4151e5)

5390 of 5981 branches covered (0.0%)

Branch coverage included in aggregate %.

20627 of 23283 relevant lines covered (88.59%)

694873.67 hits per line