zhaozg / lua-openssl / 35494843781

94%

master: 93%

push

travis-ci

x509.name.new: guard against non-table array elements (nil deref crash)

x509.name.new{ "CN=x" } (array of strings) passed the luaL_checktable +
rawlen>0 checks in openssl_xname_new, then openssl_new_xname ran lua_next
on the string element, treating it as a table -> luaH_next dereferenced a
NULL array pointer and crashed the whole process (pcall cannot catch a
segfault).

Check each array element with lua_istable before iterating it, and return
nil+error instead of crashing.

1 of 3 new or added lines in 1 file covered. (33.33%)

10631 of 11344 relevant lines covered (93.71%)

2133.07 hits per line