tarantool / luajit / 12813015940

93%

tarantool/master: 93%

push

github

Prevent loop in snap_usedef().

Reported by XmiliaH.

(cherry picked from commit 0e66fc963)

It is possible to get an infinite loop in a function `snap_usedef`
when a `UCLO` makes a tight loop. This infinite loop could happen
when `snap_usedef()` is called on trace exit processes UCLO
bytecode instruction and this instruction attempts a jump with
negative value. The patch fixes the problem by checking a number
of slots in a jump argument and replace this value my `maxslot` if
a value is negative.

Sergey Bronnikov:
* added the description and the test for the problem

Part of tarantool/tarantool#10709

5694 of 6032 branches covered (94.4%)

Branch coverage included in aggregate %.

21693 of 23429 relevant lines covered (92.59%)

2942291.92 hits per line