tarantool / tarantool / 26043904892

88%

push

github

uri: fix a crash due to long URI in uri.format()

The function `uri.format()` creates a Lua string using ffi.string()
with a length greater than a length of the passed buffer, this
leads to a crash under AddressSanitizer due to use-after-poison.
The patch fixes the aforementioned problem. First time the function
`builtin.uri_format()` is calling with default length (1024) and
if returned length is greater than default length, then
`builtin.uri_format()` is called second time.

The patch also fixes a wrong type in an FFI function declaration
and enables a test `uri_parse_test.lua` previously blocked by the
fixed bug.

Fixes tarantool/security#151

NO_DOC=bugfix

70711 of 118960 branches covered (59.44%)

106335 of 121277 relevant lines covered (87.68%)

1376993.66 hits per line