unwind: bugfix: unhandled_ex not gc-protected.

Exception info stashed into the unhandled_ex global
pseudo-frame is not protected from gc reclamation.  This
allows for use-after-free errors, that can reproduce if
unwind-protect cleanup forms that go off during the processing
of an unhandled exception trigger gc. The code which deals
with unhandled exception, like error_trace, then works with
exception arguments that are now objects on the free list.

* unwind.c (uw_init): GC-protect the exception sym and
arguments stored in unhandled_ex.

0 files changed, 0 insertions, 0 deletions