Files
mruby-mruby/mrbgems
Yukihiro "Matz" Matsumoto b4af2afd31 mruby-bigint: fix heap-buffer-overflow from inflated sz in mpz_set copies
Add trim() after mpz_set in early return paths to prevent propagation
of inflated sz values. When an mpz_t has sz larger than actual allocated
limbs, copying it without trim causes subsequent operations to read
beyond allocated memory.

Fixed functions:
- mpz_add: when one operand is zero
- mpz_neg: when copying operand
- mpz_mod_2exp: when x < 2^e

Co-authored-by: Claude <noreply@anthropic.com>
2026-01-14 00:58:40 +09:00
..
2025-10-25 21:05:39 +09:00
2024-09-24 00:14:24 +10:00