lean-0009: Reference count overflow corrupted runtime objects

A wrapping reference counter in the runtime could corrupt object state. The fix freezes an object whose count overflows so it is never freed, the 'sticky' approach from Koka. Listed among the runtime soundness bugs in the FRO's bug hunt.

Statusfixed
Fixed inv4.33.1
Subsystemruntime
Guarantee broken
compiler-soundness
Mechanism
memory-safety
Symptom—
Severityunsoundness
Fools—
Discovery
fro-bug-hunt
Features—
References