rusefi
/
lua
mirror of https://github.com/rusefi/lua.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

added "reasonable" limit for 'string.rep' (otherwise it is too easy 

to crash the machine)
This commit is contained in:
Roberto Ierusalimschy 2013-06-20 12:06:51 -03:00
parent 453450d687
commit 7c4cc505db
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
lstrlib.c
View File

@ -1,11 +1,12 @@
/*
** $Id: lstrlib.c,v 1.180 2013/06/07 14:51:10 roberto Exp roberto $
** $Id: lstrlib.c,v 1.181 2013/06/19 14:29:01 roberto Exp roberto $
** Standard library for string operations and pattern-matching
** See Copyright Notice in lua.h
*/
#include <ctype.h>
#include <limits.h>
#include <stddef.h>
#include <stdio.h>
#include <stdlib.h>
@ -102,8 +103,12 @@ static int str_upper (lua_State *L) {
}
/* reasonable limit to avoid arithmetic overflow */
#define MAXSIZE ((~(size_t)0) >> 1)
/* reasonable limit to avoid arithmetic overflow and strings too big */
#if INT_MAX / 2 <= 0x10000000
#define MAXSIZE ((size_t)(INT_MAX / 2))
#else
#define MAXSIZE ((size_t)0x10000000)
#endif
static int str_rep (lua_State *L) {
size_t l, lsep;