blob: da00b230d9fb73b54e7506187a4d9b967772fbfd [file] [log] [blame]
#![feature(generators, generator_trait, box_leak)]
use std::cell::RefCell;
use std::ops::Generator;
use std::pin::Pin;
fn main() {
let (mut gen, cell);
cell = Box::new(RefCell::new(0));
let ref_ = Box::leak(Box::new(Some(cell.borrow_mut())));
//~^ ERROR `*cell` does not live long enough [E0597]
// the upvar is the non-dropck `&mut Option<Ref<'a, i32>>`.
gen = || {
// but the generator can use it to drop a `Ref<'a, i32>`.
let _d = ref_.take(); //~ ERROR `ref_` does not live long enough
yield;
};
Pin::new(&mut gen).resume(());
// drops the RefCell and then the Ref, leading to use-after-free
}