mirror of https://github.com/rusefi/lua.git
BUG: lua_setfenv may crash if called over an invalid object
This commit is contained in:
parent
b4164a9aa7
commit
abcc124df0
21
bugs
21
bugs
|
@ -1594,6 +1594,27 @@ ltablib.c:
|
|||
]],
|
||||
}
|
||||
|
||||
Bug{
|
||||
what = [[lua_setfenv may crash if called over an invalid object]],
|
||||
report = [[Mike Pall, on 11/2007]],
|
||||
since = [[5.1]],
|
||||
example = [[
|
||||
> debug.setfenv(3, {})
|
||||
]],
|
||||
patch = [[
|
||||
lapi.c:
|
||||
@@ -749,7 +749,7 @@
|
||||
res = 0;
|
||||
break;
|
||||
}
|
||||
- luaC_objbarrier(L, gcvalue(o), hvalue(L->top - 1));
|
||||
+ if (res) luaC_objbarrier(L, gcvalue(o), hvalue(L->top - 1));
|
||||
L->top--;
|
||||
lua_unlock(L);
|
||||
return res;
|
||||
]],
|
||||
}
|
||||
|
||||
Bug{
|
||||
what = [[ ]],
|
||||
report = [[ , on ]],
|
||||
|
|
4
lapi.c
4
lapi.c
|
@ -1,5 +1,5 @@
|
|||
/*
|
||||
** $Id: lapi.c,v 2.60 2007/04/17 13:19:53 roberto Exp roberto $
|
||||
** $Id: lapi.c,v 2.61 2007/08/07 16:53:40 roberto Exp roberto $
|
||||
** Lua API
|
||||
** See Copyright Notice in lua.h
|
||||
*/
|
||||
|
@ -733,7 +733,7 @@ LUA_API int lua_setfenv (lua_State *L, int idx) {
|
|||
res = 0;
|
||||
break;
|
||||
}
|
||||
luaC_objbarrier(L, gcvalue(o), hvalue(L->top - 1));
|
||||
if (res) luaC_objbarrier(L, gcvalue(o), hvalue(L->top - 1));
|
||||
L->top--;
|
||||
lua_unlock(L);
|
||||
return res;
|
||||
|
|
Loading…
Reference in New Issue