More tickets were opened by Dan Collins and Brian Carpenter, results of fuzzing perl and uncovering interesting ways to crash perl.
Brian Carpenter found two bugs causing a null pointer dereference, leading to a segfault (Perl#126191, Perl#126192).
Brian Carpenter found a couple of assertion failures (Perl#126193, Perl#126170).
Dan Collins found a double free problem (Perl#126199). Vincent Pit was able to provide a summary of this bug in the form of:
$[ .= *[ = 'y'
which I found too cool to leave out.
Dan Collins provided a segfault (Perl#126204) caused by the following reduced regex:
/(?[()-!])/
Perl#126206 is a floating point exception. Reported by Dan Collins.
Perl#126042 is a stack corruption caused by perl losing track of the stack pointer. Reported by Dan Collins, fixed by Father Chrysostomos.
Father C. raised a problem with the implementation details of PL_sv_yes
,
and cautiously proposed at least a specific usage of it be removed from perl space.
Zefram supported and added that -- even if implemented correctly -- it would still be wrong.
Perl#126064: Yet another stack corruption; like the previous one, reported by Dan Collins, fixed by Father Chrysostomos.
PRT#126188: When requiring IO::File in an attempt to resolve missing method on a hash, a segfault happens. Yet more results of fuzzing. Reported by Dan Collins.
Ricardo Signes bumped another fuzzing bug which caused a segfault and Shlomi Fish provided a patch, seconded by Reini Urban and discussed and approved on #p5p - leading to the patch being applied. (Perl#125350)