tarantool / tarantool / 26164894919

86%

master: 88%

push

github

uri: fix a crash due to long URI in uri.format()

The function `uri.format()` creates a Lua string using ffi.string()
with a length greater than a length of the passed buffer, this
leads to a crash under AddressSanitizer due to use-after-poison.
The patch fixes the aforementioned problem. First time the function
`builtin.uri_format()` is calling with default length (1024) and
if returned length is greater than default length, then
`builtin.uri_format()` is called second time.

The patch also fixes a wrong type in an FFI function declaration
and enables a test `uri_parse_test.lua` previously blocked by the
fixed bug.

Fixes tarantool/security#151

NO_DOC=bugfix

(cherry picked from commit 81a8ffb38)

63693 of 115148 branches covered (55.31%)

94689 of 109936 relevant lines covered (86.13%)

1907580.2 hits per line