* array.c (ary_resize_capa): should not overwrite outside embedded

  array.


git-svn-id: http://svn.ruby-lang.org/repos/ruby/trunk@22306 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

1 files changed, 2 insertions, 1 deletions

diff --git a/array.c b/array.c
index 35023f320..5a6ceebea 100644
--- a/array.c
+++ b/array.c
@@ -163,7 +163,8 @@ ary_resize_capa(VALUE ary, long capacity)
     else {
         if (!ARY_EMBED_P(ary)) {
             long len = RARRAY_LEN(ary); 
-            VALUE *ptr = RARRAY_PTR(ary); 
+            VALUE *ptr = RARRAY_PTR(ary);
+            if (len > capacity) len = capacity;
             MEMCPY(RARRAY(ary)->as.ary, ptr, VALUE, len); 
             FL_SET_EMBED(ary); 
             ARY_SET_LEN(ary, len);