The mruby 3.2 release has been introduced, which is an embedded interpreter for the dynamic object-oriented programming language Ruby. Mruby provides basic syntax compatibility at the Ruby 3.x level, except for support for pattern matching ("case .. in"). The interpreter is characterized by low memory consumption and is designed for embedding Ruby language support into other applications. The interpreter built into the application can execute both source code in Ruby and bytecode generated using the project's developing compiler "mrbc". The source texts of mruby are distributed under the MIT license.
In the new release, 19 vulnerabilities have been fixed that could lead to buffer overflows, null pointer dereferences, or accessing memory after it has been freed when processing specially crafted Ruby code by the interpreter.
Notable non-security-related changes include:
- Support for passing anonymous arguments (*, **, &),
- Support for large integers (mruby-bigint).
- Support for loading compiled binary files with the extension ".mrb."
- Addition of the "—no-optimize" option to disable optimizations in the mrbc compiler.
- Implementation of the Class#subclasses and Module#undefined_instance_methods methods in mruby-class-ext.
- New built-in libraries mruby-errno, mruby-set, mruby-dir, and mruby-data.
Source: opennet.ru
