mirror of https://github.com/rusefi/lua.git
added "reasonable" limit for 'string.rep' (otherwise it is too easy
to crash the machine)
This commit is contained in:
parent
453450d687
commit
7c4cc505db
11
lstrlib.c
11
lstrlib.c
|
@ -1,11 +1,12 @@
|
||||||
/*
|
/*
|
||||||
** $Id: lstrlib.c,v 1.180 2013/06/07 14:51:10 roberto Exp roberto $
|
** $Id: lstrlib.c,v 1.181 2013/06/19 14:29:01 roberto Exp roberto $
|
||||||
** Standard library for string operations and pattern-matching
|
** Standard library for string operations and pattern-matching
|
||||||
** See Copyright Notice in lua.h
|
** See Copyright Notice in lua.h
|
||||||
*/
|
*/
|
||||||
|
|
||||||
|
|
||||||
#include <ctype.h>
|
#include <ctype.h>
|
||||||
|
#include <limits.h>
|
||||||
#include <stddef.h>
|
#include <stddef.h>
|
||||||
#include <stdio.h>
|
#include <stdio.h>
|
||||||
#include <stdlib.h>
|
#include <stdlib.h>
|
||||||
|
@ -102,8 +103,12 @@ static int str_upper (lua_State *L) {
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
/* reasonable limit to avoid arithmetic overflow */
|
/* reasonable limit to avoid arithmetic overflow and strings too big */
|
||||||
#define MAXSIZE ((~(size_t)0) >> 1)
|
#if INT_MAX / 2 <= 0x10000000
|
||||||
|
#define MAXSIZE ((size_t)(INT_MAX / 2))
|
||||||
|
#else
|
||||||
|
#define MAXSIZE ((size_t)0x10000000)
|
||||||
|
#endif
|
||||||
|
|
||||||
static int str_rep (lua_State *L) {
|
static int str_rep (lua_State *L) {
|
||||||
size_t l, lsep;
|
size_t l, lsep;
|
||||||
|
|
Loading…
Reference in New Issue