1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00

string.c: fix integer overflow

* string.c (rb_str_change_terminator_length): fix integer overflow
  in the case growing the terminator length and the string length
  is around LONG_MAX.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@56149 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
nobu 2016-09-13 08:12:54 +00:00
parent be3baa4380
commit 8a64787632

View file

@ -2054,7 +2054,8 @@ rb_str_change_terminator_length(VALUE str, const int oldtermlen, const int terml
long capa = str_capacity(str, oldtermlen);
long len = RSTRING_LEN(str);
if (capa < len + termlen - oldtermlen) {
assert(capa >= len);
if (capa - len < termlen - oldtermlen) {
rb_check_lockedtmp(str);
str_make_independent_expand(str, len, 0L, termlen);
}