diff options
| author | Yukihiro "Matz" Matsumoto <[email protected]> | 2020-11-29 16:24:30 +0900 |
|---|---|---|
| committer | GitHub <[email protected]> | 2020-11-29 16:24:30 +0900 |
| commit | d4439479cfe664fe4132ba26bc715ec1d94873c4 (patch) | |
| tree | 5fa8c4ce78bb032a2160db311c413ee5cb6dba8a /src | |
| parent | c6071335a14668bc8f0256739bc74d4a547a38cf (diff) | |
| parent | df13d418c31856baed5bcba4636b9677c74b613c (diff) | |
| download | mruby-d4439479cfe664fe4132ba26bc715ec1d94873c4.tar.gz mruby-d4439479cfe664fe4132ba26bc715ec1d94873c4.zip | |
Merge pull request #5203 from komainu8/fix-heap-buffer-overflow
Fix heap buffer overflow when dump irep
Diffstat (limited to 'src')
| -rw-r--r-- | src/dump.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/dump.c b/src/dump.c index d6734e9bf..03aa04c54 100644 --- a/src/dump.c +++ b/src/dump.c @@ -293,6 +293,7 @@ get_irep_record_size_1(mrb_state *mrb, const mrb_irep *irep) size_t size = 0; size += get_irep_header_size(mrb); + size += sizeof(uint16_t); size += get_iseq_block_size(mrb, irep); size += get_catch_table_block_size(mrb, irep); size += get_pool_block_size(mrb, irep); |