From cbf0c7a103bd69a2b8d8a55f676cf7bb08058909 Mon Sep 17 00:00:00 2001
From: Roberto Ierusalimschy <roberto@inf.puc-rio.br>
Date: Tue, 3 Feb 2009 17:39:19 -0200
Subject: check for invalid use of '%' in replacement string in 'string.gsub'
---
lstrlib.c | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
(limited to 'lstrlib.c')
diff --git a/lstrlib.c b/lstrlib.c
index 6727990d..cd10c320 100644
--- a/lstrlib.c
+++ b/lstrlib.c
@@ -1,5 +1,5 @@
/*
-** $Id: lstrlib.c,v 1.140 2008/04/14 15:54:59 roberto Exp roberto $
+** $Id: lstrlib.c,v 1.141 2008/06/12 14:21:18 roberto Exp roberto $
** Standard library for string operations and pattern-matching
** See Copyright Notice in lua.h
*/
@@ -600,8 +600,12 @@ static void add_s (MatchState *ms, luaL_Buffer *b, const char *s,
luaL_addchar(b, news[i]);
else {
i++; /* skip ESC */
- if (!isdigit(uchar(news[i])))
+ if (!isdigit(uchar(news[i]))) {
+ if (news[i] != L_ESC)
+ luaL_error(ms->L, "invalid use of " LUA_QL("%c")
+ " in replacement string", L_ESC);
luaL_addchar(b, news[i]);
+ }
else if (news[i] == '0')
luaL_addlstring(b, s, e - s);
else {
--
cgit v1.2.3-55-g6feb