diff options
| author | Roberto Ierusalimschy <roberto@inf.puc-rio.br> | 2018-12-17 15:36:51 -0200 |
|---|---|---|
| committer | Roberto Ierusalimschy <roberto@inf.puc-rio.br> | 2018-12-17 15:36:51 -0200 |
| commit | 1221e987fe5ffbf2464b6e56301fb09cf6f3bb32 (patch) | |
| tree | 057c11d1f99e4934ec10584553e70bee5a6778f3 /bugs | |
| parent | 063d4e4543088e7a21965bda8ee5a0f952a9029e (diff) | |
| download | lua-1221e987fe5ffbf2464b6e56301fb09cf6f3bb32.tar.gz lua-1221e987fe5ffbf2464b6e56301fb09cf6f3bb32.tar.bz2 lua-1221e987fe5ffbf2464b6e56301fb09cf6f3bb32.zip | |
Bug: Long brackets with a huge number of '=' causes overflow
A long bracket with too many equal signs can overflow the 'int' used for
the counting and some arithmetic done on the value. Changing the counter
to 'size_t' avoids that. (Because what is counted goes to a buffer, an
overflow in the counter will first raise a buffer-overflow error.)
Diffstat (limited to 'bugs')
0 files changed, 0 insertions, 0 deletions