diff --git a/ChangeLog b/ChangeLog index dbf76026c1..9856ff0954 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,8 @@ +Fri Oct 8 09:49:32 2004 Yukihiro Matsumoto + + * pack.c (pack_pack): pointer modification check before each + iteration. [ruby-dev:24445] + Fri Oct 8 01:13:05 2004 Hidetoshi NAGAI * ext/tk/lib/tk/optiondb.rb: make it more secure diff --git a/pack.c b/pack.c index fdca0ed028..5e7ae09e20 100644 --- a/pack.c +++ b/pack.c @@ -464,6 +464,9 @@ pack_pack(ary, fmt) #define NEXTFROM (items-- > 0 ? RARRAY(ary)->ptr[idx++] : (rb_raise(rb_eArgError, toofew),0)) while (p < pend) { + if (RSTRING(fmt)->ptr + RSTRING(fmt)->len != pend) { + rb_raise(rb_eRuntimeError, "format string modified"); + } type = *p++; /* get data type */ #ifdef NATINT_PACK natint = 0;