From 092bba64e7694d046299795faa89ec26c033052a Mon Sep 17 00:00:00 2001 From: "Yukihiro \"Matz\" Matsumoto" Date: Wed, 24 Mar 2021 13:28:01 +0900 Subject: rational.c: check integer overflow in `rational_minus`. --- mrbgems/mruby-rational/src/rational.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'mrbgems/mruby-rational/src') diff --git a/mrbgems/mruby-rational/src/rational.c b/mrbgems/mruby-rational/src/rational.c index be9b5eaf9..1577a7045 100644 --- a/mrbgems/mruby-rational/src/rational.c +++ b/mrbgems/mruby-rational/src/rational.c @@ -403,7 +403,9 @@ static mrb_value rational_minus(mrb_state *mrb, mrb_value x) { struct mrb_rational *p = rational_ptr(mrb, x); - return rational_new(mrb, -p->numerator, p->denominator); + mrb_int n = p->numerator; + if (n == MRB_INT_MIN) rat_overflow(mrb); + return rational_new(mrb, -n, p->denominator); } mrb_int mrb_num_div_int(mrb_state*, mrb_int, mrb_int); -- cgit v1.2.3