Check if mruby-pack template count overflow; fix #3942

This commit is contained in:
Yukihiro "Matz" Matsumoto
2018-02-09 12:55:13 +09:00
parent b43c146455
commit 4c1494d58f
+3
View File
@@ -1050,6 +1050,9 @@ alias:
count = ch - '0';
while (tmpl->idx < tlen && isdigit(tptr[tmpl->idx])) {
count = count * 10 + (tptr[tmpl->idx++] - '0');
if (count < 0) {
mrb_raisef(mrb, E_RUNTIME_ERROR, "too big template length");
}
}
continue; /* special case */
} else if (ch == '*') {