Yukihiro "Matz" Matsumoto edce0a338f bigint.c: fix stack buffer overflow in Montgomery reduction ...

The work buffer size in mpz_montgomery_reduce() was calculated as
x_len + k + 2, which assumed x_len >= k. However, when R^2 mod n
produces a small result, x_len can be much smaller than k.

The Montgomery reduction loop writes k limbs at work[i] for each
iteration i=0..k-1, so the maximum index accessed is work[2k-1].
This requires at least 2k limbs in the work buffer.

Fixed by ensuring work_size is at least 2*k+2 limbs when x_len < k.

Also initialize b->as.heap before mpz_move in bint_set() to ensure
the destination mpz_t has valid initial state.

Co-authored-by: Claude <noreply@anthropic.com>

2026-02-10 11:12:26 +09:00

..

hal-posix-dir

HAL: rename functions to mrb_hal_<feature>_<name> convention

2025-10-16 09:59:03 +09:00

hal-posix-io

Improve error handling for file descriptor range

2026-01-25 15:46:56 +01:00

hal-posix-socket

mruby-sleep, hal-posix-socket: fix amalgamation compatibility

2026-01-02 18:28:31 +09:00

hal-posix-task

Remove unnecessary code

2026-01-14 14:56:50 +09:00

hal-win-dir

hal-win-dir: rewrite comment to avoid comment nesting warning

2025-10-16 16:54:25 +09:00

hal-win-io

Add error handling for fdset size limit

2026-01-25 16:04:23 +01:00

hal-win-socket

Explicitly include errno.h

2025-10-25 21:05:39 +09:00

hal-win-task

hal-win-task: fix integer conversion warning on msvc

2025-10-16 17:02:23 +09:00

mruby-array-ext

Use MRB_ENSURE() instead of mrb_ensure()

2026-01-24 11:32:57 +09:00

mruby-benchmark

mruby-benchmark: standardize block parameter spacing

2025-12-11 18:09:09 +09:00

mruby-bigint

bigint.c: fix stack buffer overflow in Montgomery reduction

2026-02-10 11:12:26 +09:00

mruby-bin-config

mrbgems: add README documentation for mruby-bin-* gems

2025-12-11 18:09:10 +09:00

mruby-bin-debugger

docs: fix pre-commit manual hooks; fix link

2025-12-28 20:28:00 +10:00

mruby-bin-mirb

mruby-bin-mirb: syntax highlight result values and hash key symbols

2026-02-10 11:12:26 +09:00

mruby-bin-mrbc

mrbgems: add README documentation for mruby-bin-* gems

2025-12-11 18:09:10 +09:00

mruby-bin-mruby

mruby-compiler: add no_return_value context flag for script optimization

2025-12-21 17:26:49 +09:00

mruby-bin-strip

mrbgems: add README documentation for mruby-bin-* gems

2025-12-11 18:09:10 +09:00

mruby-binding

mruby-binding: add error helper functions to eliminate goto

2025-11-12 10:25:36 +09:00

mruby-catch

test: add parentheses to method calls on assignment RHS

2026-01-27 14:58:14 +09:00

mruby-class-ext

mruby-class-ext: fix crash in module comparison with invalid types

2025-10-14 08:22:41 +09:00

mruby-cmath

mruby-cmath: use MRB_SYM() and mrb_define_module_function_id()

2025-10-08 23:55:23 +09:00

mruby-compar-ext

docs: replace xml-style markup with markdown in comments

2025-08-14 10:52:49 +09:00

mruby-compiler

codegen.c: fix sign-compare warning in gen_binop()

2026-01-27 16:03:08 +09:00

mruby-complex

mruby-complex: add parentheses to Math method calls

2025-12-11 18:09:08 +09:00

mruby-data

docs: replace xml-style markup with markdown in comments

2025-08-14 10:52:49 +09:00

mruby-dir

mruby-dir: combine variable declaration with initialization

2025-11-08 14:27:44 +09:00

mruby-encoding

string.c: add mrb_strcasecmp_p for case-insensitive comparison

2025-12-23 10:41:21 +09:00

mruby-enum-chain

mruby-enum-chain: add parentheses to to_enum call

2025-12-11 18:09:06 +09:00

mruby-enum-ext

mruby-enum-ext: fix remaining block parameter spacing

2025-12-11 18:09:09 +09:00

mruby-enum-lazy

mruby-enum-lazy: standardize block parameter spacing

2025-12-11 18:09:09 +09:00

mruby-enumerator

mruby-enumerator: add parentheses to block.call

2025-12-11 18:09:07 +09:00

mruby-errno

mruby-errno: combine variable declaration with initialization

2025-10-27 07:59:20 +09:00

mruby-error

mruby-error: combine variable declaration with initialization

2025-11-08 14:26:49 +09:00

mruby-eval

Use the specialized MRB_ENSURE() instead of mrb_protect_error()

2026-01-24 11:34:02 +09:00

mruby-exit

docs: replace xml-style markup with markdown in comments

2025-08-14 10:52:49 +09:00

mruby-fiber

mruby-fiber,mruby-task: increase stack init size for 32-bit msvc

2025-10-18 23:34:10 +09:00

mruby-hash-ext

mruby-hash-ext: standardize block parameter spacing

2025-12-11 18:09:09 +09:00

mruby-io

test: add parentheses to method calls on assignment RHS

2026-01-27 14:58:14 +09:00

mruby-kernel-ext

mruby-kernel-ext: add error helper function to eliminate goto

2025-11-12 10:25:37 +09:00

mruby-math

mruby-math: combine variable declaration with initialization

2025-10-26 23:30:14 +09:00

mruby-metaprog

Adjust broken license links; clean up Markdown

2025-11-29 01:46:54 +10:00

mruby-method

mruby-method: standardize block parameter spacing

2025-12-11 18:09:10 +09:00

mruby-numeric-ext

mruby-bigint, mruby-numeric-ext: fix Integer#pow with negative modulus

2025-12-30 16:25:49 +09:00

mruby-object-ext

mruby-object-ext: add parentheses to to_enum call

2025-12-11 18:09:07 +09:00

mruby-objectspace

docs: replace xml-style markup with markdown in comments

2025-08-14 10:52:49 +09:00

mruby-os-memsize

mruby-os-memsize: support Set class

2025-06-24 13:56:07 +09:00

mruby-pack

Fix float/double pack/unpack on big-endian architectures

2026-01-12 03:00:53 +01:00

mruby-proc-binding

mruby-proc-binding: combine variable declaration with initialization

2025-11-08 14:24:40 +09:00

mruby-proc-ext

Fixes identity for proc object

2026-02-07 16:47:39 +09:00

mruby-random

mruby-random: fix FPE in rand_i() for large ranges

2025-12-29 12:54:32 +09:00

mruby-range-ext

Adjust broken license links; clean up Markdown

2025-11-29 01:46:54 +10:00

mruby-rational

mruby-rational: fix infinite recursion with bigint comparison

2026-01-12 19:23:15 +09:00

mruby-set

mruby-set: fix memory leak in khash rebuild using mrb_protect_error()

2026-01-17 13:00:45 +09:00

mruby-sleep

mruby-sleep, hal-posix-socket: fix amalgamation compatibility

2026-01-02 18:28:31 +09:00

mruby-socket

mruby-io: rename mruby/ext/io.h to mruby/io.h

2025-12-11 18:09:11 +09:00

mruby-sprintf

mruby-sprintf: improve initial buffer size estimation

2025-12-29 11:56:58 +09:00

mruby-strftime

gc.c: rename mrb_alloca() to mrb_temp_alloc() and fix memory leaks

2026-01-08 08:23:51 +09:00

mruby-string-ext

hash.c, symbol.c, string.c, mruby-string-ext: undef lesser macro

2026-01-01 10:23:21 +09:00

mruby-struct

test: add parentheses to method calls on assignment RHS

2026-01-27 14:58:14 +09:00

mruby-symbol-ext

docs: replace xml-style markup with markdown in comments

2025-08-14 10:52:49 +09:00

mruby-task

Merge pull request #6706 from Asmod4n/patch-4

2026-01-20 13:28:25 +09:00

mruby-test

mruby.h: add MRB_OPEN_FAILURE() macro and refactor MRB_OPEN_SUCCESS()

2025-11-16 06:53:02 +09:00

mruby-test-inline-struct

Fix spelling

2024-09-24 00:14:24 +10:00

mruby-time

mruby-time: fix integer overflow in time_mktime

2026-01-05 12:35:09 +09:00

mruby-toplevel-ext

mruby-toplevel-ext: add comprehensive call-seq documentation for toplevel include

2025-08-14 10:52:47 +09:00

default-no-fpu.gembox

Specify receivers for gembox methods; ref #5241

2021-01-06 18:10:21 +09:00

default-no-stdio.gembox

Specify receivers for gembox methods; ref #5241

2021-01-06 18:10:21 +09:00

default.gembox

Update default.gembox add mruby debugger mrbd

2023-04-04 19:31:42 +10:00

full-core.gembox

full-core.gembox: exclude mruby-sleep from gembox

2025-10-08 23:55:21 +09:00

math.gembox

math.gembox: exclude mruby-cmath from math gembox

2025-05-14 15:58:23 +09:00

metaprog.gembox

metaprog.gembox: add two binding gems

2025-05-14 15:58:24 +09:00

stdlib-ext.gembox

mruby-data: new gem for Data class introduced in Ruby 3.2

2022-11-29 15:58:05 +09:00

stdlib-io.gembox

mruby-print: disable the gem unless explicitly specified

2025-01-06 13:57:23 +09:00

stdlib.gembox

stdlib.gembox: add mruby-catch to the gembox

2025-05-19 08:00:36 +09:00