1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00

* compile.c (ibf_load_setup): check tainted string argument.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@53187 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
ko1 2015-12-18 07:51:58 +00:00
parent f64238e777
commit dd5fd65eef
2 changed files with 6 additions and 0 deletions

View file

@ -1,3 +1,7 @@
Fri Dec 18 16:50:35 2015 Koichi Sasada <ko1@atdot.net>
* compile.c (ibf_load_setup): check tainted string argument.
Fri Dec 18 16:12:13 2015 Koichi Sasada <ko1@atdot.net>
* vm_core.h: define USE_LAZY_LOAD if it is not defined.

View file

@ -8203,6 +8203,8 @@ ibf_load_iseq(const struct ibf_load *load, const rb_iseq_t *index_iseq)
static void
ibf_load_setup(struct ibf_load *load, VALUE loader_obj, VALUE str)
{
rb_check_safe_obj(str);
if (RSTRING_LENINT(str) < (int)sizeof(struct ibf_header)) {
rb_raise(rb_eRuntimeError, "broken binary format");
}