tarantool / luajit / 10733088351

93%

tarantool/master: 93%

Build Type

push

github

Committed by Buristan

Commit Message

Limit number of string format elements to compile.

Reported by pwnhacker0x18.

(cherry picked from commit 4fc48c50f)

When compiling `string.format()` with a huge sequence of elements, it is
possible that too many KGC IRs underflow the IR buffer. This patch
limits the maximum number of `string.format()` elements to be compiled
to 100.

Sergey Kaplun:
* added the description and the test for the problem

Part of tarantool/tarantool#10199

Reviewed-by: Sergey Bronnikov <sergeyb@tarantool.org>
Reviewed-by: Maxim Kokryashkin <m.kokryashkin@tarantool.org>
Signed-off-by: Sergey Kaplun <skaplun@tarantool.org>
(cherry picked from commit d9e19aebc)

Run Details

5682 of 6026 branches covered (94.29%)

Branch coverage included in aggregate %.

2 of 2 new or added lines in 1 file covered. (100.0%)

20 existing lines in 4 files now uncovered.

21658 of 23433 relevant lines covered (92.43%)

2948743.58 hits per line