The example given by parent does not need eval to trigger though. Just create a function and replace its code object then call it, it will easily segfault.