From: Nicholas Clark <nick@ccl4.org>
Date: Sat, 12 Jun 2010 20:13:14 +0000 (+0100)
Subject: Fix edge case in pp_eof where the stack extent was not checked.
X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?a=commitdiff_plain;h=b5f55170e8ef2a91497f68ff0af6ff6cded9f433;p=p5sagit%2Fp5-mst-13.2.git

Fix edge case in pp_eof where the stack extent was not checked.

Analogous to pp_getc and pp_tell in ac3697cd90b00fae, pp_eof has a conditional
POP from the stack, but an unconditional PUSH to the stack, but no check that
the stack had space for the PUSH. This bug has been present since perl 5.000.
---

diff --git a/pp_sys.c b/pp_sys.c
index 9d4887f..3525bfe 100644
--- a/pp_sys.c
+++ b/pp_sys.c
@@ -2010,10 +2010,14 @@ PP(pp_eof)
 
     if (MAXARG)
 	gv = PL_last_in_gv = MUTABLE_GV(POPs);	/* eof(FH) */
-    else if (PL_op->op_flags & OPf_SPECIAL)
-	gv = PL_last_in_gv = GvEGVx(PL_argvgv);	/* eof() - ARGV magic */
-    else
-	gv = PL_last_in_gv;			/* eof */
+    else {
+	EXTEND(SP, 1);
+
+	if (PL_op->op_flags & OPf_SPECIAL)
+	    gv = PL_last_in_gv = GvEGVx(PL_argvgv);	/* eof() - ARGV magic */
+	else
+	    gv = PL_last_in_gv;			/* eof */
+    }
 
     if (!gv)
 	RETPUSHNO;