tarantool / luajit / 7280369388 / 1

89%

tarantool/master: 93%

push

github

FFI: Fix dangling reference to CType in carith_checkarg().

Reported by Sergey Kaplun.

(cherry-picked from commit db944b2b5)

During of an arithmetic operation with a cdata function object and some
cdata value in `carith_checkarg()`, reallocation of `cts->tab` in
`lj_ctype_intern()` may occur. In that case, the reference to the first
`CType` object (`ca->ct[0]`) becomes invalid. This patch saves the
`CTypeID` of this object and gets its `CType` again after possible
reallocation.

Sergey Kaplun:
* added the description and the test for the problem

Part of tarantool/tarantool#9145

Reviewed-by: Maxim Kokryashkin <m.kokryashkin@tarantool.org>
Reviewed-by: Sergey Bronnikov <sergeyb@tarantool.org>
Signed-off-by: Igor Munkin <imun@tarantool.org>
(cherry picked from commit 3493258db)

5371 of 5976 branches covered (0.0%)

Branch coverage included in aggregate %.

20567 of 23267 relevant lines covered (88.4%)

698652.48 hits per line