tarantool / luajit / 10733088357

93%

Build Type

push

github

Committed by Buristan

Commit Message

Limit number of string format elements to compile.

Reported by pwnhacker0x18.

(cherry picked from commit 4fc48c50f)

When compiling `string.format()` with a huge sequence of elements, it is
possible that too many KGC IRs underflow the IR buffer. This patch
limits the maximum number of `string.format()` elements to be compiled
to 100.

Sergey Kaplun:
* added the description and the test for the problem

Part of tarantool/tarantool#10199

Reviewed-by: Sergey Bronnikov <sergeyb@tarantool.org>
Reviewed-by: Maxim Kokryashkin <m.kokryashkin@tarantool.org>
Signed-off-by: Sergey Kaplun <skaplun@tarantool.org>

Run Details

5686 of 6026 branches covered (94.36%)

Branch coverage included in aggregate %.

2 of 2 new or added lines in 1 file covered. (100.0%)

10 existing lines in 3 files now uncovered.

21676 of 23433 relevant lines covered (92.5%)

2953686.99 hits per line