diff options
| author | Yukihiro "Matz" Matsumoto <[email protected]> | 2014-02-28 09:59:00 +0900 |
|---|---|---|
| committer | Yukihiro "Matz" Matsumoto <[email protected]> | 2014-02-28 09:59:00 +0900 |
| commit | dd5ccb6cd59ecae1889aae0f66516ca04291a454 (patch) | |
| tree | 716f4c5e03145c913e57d3ef95cb59210c356809 | |
| parent | 25822f2430eb31ecf012264a53f6a82fc7d6ad30 (diff) | |
| parent | 8336072e865d9fbe03645b95ab2ea37d84ecd65d (diff) | |
| download | mruby-dd5ccb6cd59ecae1889aae0f66516ca04291a454.tar.gz mruby-dd5ccb6cd59ecae1889aae0f66516ca04291a454.zip | |
Merge pull request #1763 from cubicdaiya/issues/mrb_str_new_static_bug
fix SEGV bug for mrb_str_new_static
| -rw-r--r-- | src/string.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/string.c b/src/string.c index 8a9ed8a24..aa1afec47 100644 --- a/src/string.c +++ b/src/string.c @@ -256,6 +256,9 @@ mrb_value mrb_str_new_static(mrb_state *mrb, const char *p, size_t len) { struct RString *s; + if ((mrb_int)len < 0) { + mrb_raise(mrb, E_ARGUMENT_ERROR, "negative string size (or size too big)"); + } s = mrb_obj_alloc_string(mrb); s->len = len; |