sprintf.c: check value range before type casting.

This commit is contained in:
Yukihiro "Matz" Matsumoto
2021-06-10 18:42:51 +09:00
parent df549c12e5
commit 62f4cc8cd1
+1
View File
@@ -270,6 +270,7 @@ get_num(mrb_state *mrb, const char *p, const char *end, int *valp)
}
next_n += *p - '0';
}
if (next_n > INT_MAX || next_n < 0) return NULL;
if (p >= end) {
mrb_raise(mrb, E_ARGUMENT_ERROR, "malformed format string - %%*[0-9]");
}