>>>>> "t" == ts  <decoux / moulon.inra.fr> writes:

t>  How many people use rb_iterate() with an invalid object given for the last
t>  argument ?

 It's was hard to try to exploit this :-)

 Here an example with ruby-1.7.0

pigeon% ruby -e '(1..10).grep(1) { GC.start }'
-e:1: [BUG] Segmentation fault
ruby 1.7.0 (2000-12-29) [i686-linux]
Aborted
pigeon% 


Guy Decoux