Merge pull request #4885 from shuujii/fix-potentially-crash-in-%n-of-mrb_vformat-with-64-bit-int

Fix potentially crash in `%n` of `mrb_vformat()` with 64-bit `int`
This commit is contained in:
Yukihiro "Matz" Matsumoto
2019-12-21 01:18:09 +09:00
committed by GitHub
+4
View File
@@ -302,7 +302,11 @@ mrb_vformat(mrb_state *mrb, const char *format, va_list ap)
mrb_gc_arena_restore(mrb, ai);
break;
case 'n':
#if UINT32_MAX < INT_MAX
obj = mrb_symbol_value((mrb_sym)va_arg(ap, int));
#else
obj = mrb_symbol_value(va_arg(ap, mrb_sym));
#endif
goto L_cat_obj;
case 's':
chars = va_arg(ap, char*);