diff options
| -rw-r--r-- | src/array.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/src/array.c b/src/array.c index 3ab74f95d..1f1127382 100644 --- a/src/array.c +++ b/src/array.c @@ -620,7 +620,12 @@ mrb_ary_splice(mrb_state *mrb, mrb_value ary, mrb_int head, mrb_int len, mrb_val argc = RARRAY_LEN(rpl); argv = RARRAY_PTR(rpl); if (argv == a->ptr) { - struct RArray *r = ary_dup(mrb, a); + struct RArray *r; + + if (argc > 32767) { + mrb_raise(mrb, E_ARGUMENT_ERROR, "too big recursive splice"); + } + r = ary_dup(mrb, a); argv = r->ptr; } } |