From 1bdc328c7542fac5101684a4ac31a25be3dff112 Mon Sep 17 00:00:00 2001
From: Roberto Ierusalimschy <roberto@inf.puc-rio.br>
Date: Fri, 19 May 2017 09:58:40 -0300
Subject: [PATCH] bug: Lua crashes when building sequences with more than 2^30
 elements. bug: Table length computation overflows for sequences larger than
 2^31 elements..

---
 bugs | 53 +++++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 51 insertions(+), 2 deletions(-)

diff --git a/bugs b/bugs
index d2ec34d2..9d947cac 100644
--- a/bugs
+++ b/bugs
@@ -3656,9 +3656,9 @@ It needs an "interceptor" 'memcmp' function that continues
 reading memory after a difference is found.]],
 patch = [[
 2c2
-< ** $Id: bugs,v 1.151 2016/10/19 12:34:27 roberto Exp roberto $
+< ** $Id: bugs,v 1.152 2017/05/05 15:55:36 roberto Exp roberto $
 ---
-> ** $Id: bugs,v 1.151 2016/10/19 12:34:27 roberto Exp roberto $
+> ** $Id: bugs,v 1.152 2017/05/05 15:55:36 roberto Exp roberto $
 263c263,264
 <   for (option = LUA_STRFTIMEOPTIONS; *option != '\0'; option += oplen) {
 ---
@@ -3746,6 +3746,55 @@ patch = [[
 }
 
 
+Bug{
+what = [[Lua crashes when building sequences with more than 2^30 elements.]],
+report = [[Viacheslav Usov, 2017/05/11]],
+since = [[ ]],
+fix = nil,
+example = [[
+-- crashes if machine has enough memory
+local t = {}
+for i = 1, 0x7fffffff do
+  t[i] = i
+end
+]],
+patch = [[
+]]
+}
+
+
+Bug{
+what = [[Table length computation overflows for sequences larger than
+2^31 elements.]],
+report = [[Viacheslav Usov, 2017/05/12]],
+since = [[ ]],
+fix = nil,
+example = [[
+-- on a machine with enough memory
+local t = {}
+for i = 1, 2147483681 do
+  t[i] = i
+end
+print(#t)
+]],
+patch = [[
+]]
+}
+
+
+--[=[
+Bug{
+what = [[ ]],
+report = [[ ]],
+since = [[ ]],
+fix = nil,
+example = [[ ]],
+patch = [[
+]]
+}
+]=]
+
+
 --[=[
 Bug{
 what = [[ ]],