tarantool / luajit / 10733088359

70%

tarantool/master: 93%

Build Type

push

github

Committed by Buristan

Commit Message

Limit number of string format elements to compile.

Reported by pwnhacker0x18.

(cherry picked from commit 4fc48c50f)

When compiling `string.format()` with a huge sequence of elements, it is
possible that too many KGC IRs underflow the IR buffer. This patch
limits the maximum number of `string.format()` elements to be compiled
to 100.

Sergey Kaplun:
* added the description and the test for the problem

Part of tarantool/tarantool#10199

Reviewed-by: Sergey Bronnikov <sergeyb@tarantool.org>
Reviewed-by: Maxim Kokryashkin <m.kokryashkin@tarantool.org>
Signed-off-by: Sergey Kaplun <skaplun@tarantool.org>
(cherry picked from commit d9e19aebc)

Run Details

5665 of 6007 branches covered (94.31%)

Branch coverage included in aggregate %.

2 of 2 new or added lines in 1 file covered. (100.0%)

3 existing lines in 3 files now uncovered.

21579 of 23341 relevant lines covered (92.45%)

881260.68 hits per line