fuzzing: don't accept out-of-range repr ids

also: accept 0 as repr id (it's MVMString)
MoarVM · Apr 18, 2019 · 275098a · 275098a
1 parent 7b112da
commit 275098a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/6model/reprs/P6opaque.c b/src/6model/reprs/P6opaque.c
@@ -1035,7 +1035,7 @@ static void deserialize_repr_data(MVMThreadContext *tc, MVMSTable *st, MVMSerial
         for (i = 0; i < repr_data->num_attributes; i++) {
             MVMuint16 repr_id = MVM_serialization_read_int(tc, reader);
             MVMuint16 slot = MVM_serialization_read_int(tc, reader);
-            if (repr_id)
+            if (repr_id < MVM_REPR_MAX_COUNT)
                 repr_data->unbox_slots[repr_id] = slot;
         }
     } else {