tarantool / luajit / 10733088357 / 1

93%

tarantool/master: 93%

push

github

Limit number of string format elements to compile.

Reported by pwnhacker0x18.

(cherry picked from commit 4fc48c50f)

When compiling `string.format()` with a huge sequence of elements, it is
possible that too many KGC IRs underflow the IR buffer. This patch
limits the maximum number of `string.format()` elements to be compiled
to 100.

Sergey Kaplun:
* added the description and the test for the problem

Part of tarantool/tarantool#10199

Reviewed-by: Sergey Bronnikov <sergeyb@tarantool.org>
Reviewed-by: Maxim Kokryashkin <m.kokryashkin@tarantool.org>
Signed-off-by: Sergey Kaplun <skaplun@tarantool.org>

5686 of 6026 branches covered (94.36%)

Branch coverage included in aggregate %.

21676 of 23433 relevant lines covered (92.5%)

2953686.99 hits per line