admin/mruby-mruby
1
0
Fork 0
mirror of https://github.com/mruby/mruby synced 2026-06-08 16:11:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

range.c: len = b - a may overflow.

Browse Source
This commit is contained in:
Yukihiro "Matz" Matsumoto
2021-09-03 16:29:26 +09:00
parent dc4b60291a
commit e02350dd02
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/range.c
+5 -2
View File
@@ -9,6 +9,7 @@
#include <mruby/range.h>
#include <mruby/string.h>
#include <mruby/array.h>
#include <mruby/numeric.h>
#include <mruby/presym.h>
#define RANGE_INITIALIZED_FLAG 1
@@ -352,15 +353,17 @@ range_num_to_a(mrb_state *mrb, mrb_value range)
mrb->c->ci->mid = 0;
if (mrb_nil_p(end)) {
mrb->c->ci->mid = 0;
mrb_raise(mrb, E_RANGE_ERROR, "cannot convert endless range to an array");
}
if (mrb_integer_p(beg)) {
if (mrb_integer_p(end)) {
mrb_int a = mrb_integer(beg);
mrb_int b = mrb_integer(end);
mrb_int len = b - a;
mrb_int len;
if (mrb_int_sub_overflow(b, a, &len)) {
mrb_raise(mrb, E_RANGE_ERROR, "integer range too long");
}
if (!RANGE_EXCL(r)) len++;
ary = mrb_ary_new_capa(mrb, len);
for (mrb_int i=0; i<len; i++) {