admin/mruby-mruby
1
0
Fork 0
mirror of https://github.com/mruby/mruby synced 2026-06-08 16:11:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

string.c: check integer overflow in str_replace_partial.

Browse Source
This commit is contained in:
Yukihiro "Matz" Matsumoto
2021-09-09 19:12:59 +09:00
parent 8a41d2b876
commit 7e612b1c89
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/string.c
+1 -3
View File
@@ -1243,9 +1243,7 @@ str_replace_partial(mrb_state *mrb, mrb_value src, mrb_int pos, mrb_int end, mrb
}
replen = (mrb_nil_p(rep) ? 0 : RSTRING_LEN(rep));
newlen = replen + (len - (end - pos));
if (newlen >= MRB_SSIZE_MAX || newlen < replen /* overflowed */) {
if (mrb_int_add_overflow(replen, len - (end - pos), &newlen) || newlen >= MRB_SSIZE_MAX) {
mrb_raise(mrb, E_RUNTIME_ERROR, "string size too big");
}