tarantool / luajit / 7804005274

93%

push

github

Fix unsinking of IR_FSTORE for NULL metatable.

Reported by pwnhacker0x18.

(cherry picked from commit 85b4fed0b)

The `FSTORE` restoring of a sunk table from a snapshot for
`IRFL_TAB_META` misses the case when the second argument of
`setmetatable()` is `nil` (so, the `FSTORE` second operand is `NULL`).
This may lead to the corresponding assertion failure in the
`snap_replay_const()` or the crash.

This patch handles the aforementioned case.

Sergey Kaplun:
* added the description and the test for the problem

Part of tarantool/tarantool#9595

Reviewed-by: Maxim Kokryashkin <m.kokryashkin@tarantool.org>
Reviewed-by: Sergey Bronnikov <sergeyb@tarantool.org>
Signed-off-by: Igor Munkin <imun@tarantool.org>

5408 of 5999 branches covered (0.0%)

Branch coverage included in aggregate %.

20715 of 23374 relevant lines covered (88.62%)

2740849.49 hits per line