tarantool / luajit / 10733088351 / 1

93%

tarantool/master: 93%

push

github

Limit number of string format elements to compile.

Reported by pwnhacker0x18.

(cherry picked from commit 4fc48c50f)

When compiling `string.format()` with a huge sequence of elements, it is
possible that too many KGC IRs underflow the IR buffer. This patch
limits the maximum number of `string.format()` elements to be compiled
to 100.

Sergey Kaplun:
* added the description and the test for the problem

Part of tarantool/tarantool#10199

Reviewed-by: Sergey Bronnikov <sergeyb@tarantool.org>
Reviewed-by: Maxim Kokryashkin <m.kokryashkin@tarantool.org>
Signed-off-by: Sergey Kaplun <skaplun@tarantool.org>
(cherry picked from commit d9e19aebc)

5682 of 6026 branches covered (94.29%)

Branch coverage included in aggregate %.

21658 of 23433 relevant lines covered (92.43%)

2948743.58 hits per line