diff options
author | Roberto Ierusalimschy <roberto@inf.puc-rio.br> | 1998-01-27 17:11:36 -0200 |
---|---|---|
committer | Roberto Ierusalimschy <roberto@inf.puc-rio.br> | 1998-01-27 17:11:36 -0200 |
commit | 8622dc18bfa9da14136763e9538222fdec31a79a (patch) | |
tree | 3e554773c46c51d5197c3318069043b79ff3362e /lstrlib.c | |
parent | d22e2644ddd6535d803ab35bd9ce2e3a5901d2e7 (diff) | |
download | lua-8622dc18bfa9da14136763e9538222fdec31a79a.tar.gz lua-8622dc18bfa9da14136763e9538222fdec31a79a.tar.bz2 lua-8622dc18bfa9da14136763e9538222fdec31a79a.zip |
bug: format size limits with little problems
Diffstat (limited to 'lstrlib.c')
-rw-r--r-- | lstrlib.c | 8 |
1 files changed, 4 insertions, 4 deletions
@@ -1,5 +1,5 @@ | |||
1 | /* | 1 | /* |
2 | ** $Id: lstrlib.c,v 1.6 1998/01/09 14:44:55 roberto Exp $ | 2 | ** $Id: lstrlib.c,v 1.7 1998/01/09 14:57:43 roberto Exp roberto $ |
3 | ** Standard library for strings and pattern-matching | 3 | ** Standard library for strings and pattern-matching |
4 | ** See Copyright Notice in lua.h | 4 | ** See Copyright Notice in lua.h |
5 | */ | 5 | */ |
@@ -449,14 +449,14 @@ static void str_format (void) | |||
449 | char *initf = strfrmt; | 449 | char *initf = strfrmt; |
450 | form[0] = '%'; | 450 | form[0] = '%'; |
451 | cap.level = 0; | 451 | cap.level = 0; |
452 | strfrmt = match(strfrmt, "%d?%$?[-+ #]*(%d*)%.?(%d*)", &cap); | ||
453 | if (cap.capture[0].len > 3 || cap.capture[1].len > 3) /* < 1000? */ | ||
454 | lua_error("invalid format (width or precision too long)"); | ||
455 | if (isdigit((unsigned char)initf[0]) && initf[1] == '$') { | 452 | if (isdigit((unsigned char)initf[0]) && initf[1] == '$') { |
456 | arg = initf[0] - '0'; | 453 | arg = initf[0] - '0'; |
457 | initf += 2; /* skip the 'n$' */ | 454 | initf += 2; /* skip the 'n$' */ |
458 | } | 455 | } |
459 | arg++; | 456 | arg++; |
457 | strfrmt = match(initf, "[-+ #0]*(%d*)%.?(%d*)", &cap); | ||
458 | if (cap.capture[0].len > 2 || cap.capture[1].len > 2) /* < 100? */ | ||
459 | lua_error("invalid format (width or precision too long)"); | ||
460 | strncpy(form+1, initf, strfrmt-initf+1); /* +1 to include convertion */ | 460 | strncpy(form+1, initf, strfrmt-initf+1); /* +1 to include convertion */ |
461 | form[strfrmt-initf+2] = 0; | 461 | form[strfrmt-initf+2] = 0; |
462 | buff = luaL_openspace(1000); /* to store the formatted value */ | 462 | buff = luaL_openspace(1000); /* to store the formatted value */ |