Skip to content
Permalink
Browse files
str_buf_cat(): should allocate at least RSTRING_EMBED_LEN_MAX+1.
  • Loading branch information
matz committed Dec 31, 2016
1 parent cfdd1e3 commit 342b1de65c5f044e1f3dc08b6e04c9cd0206abc3
Showing 1 changed file with 2 additions and 0 deletions.
@@ -158,6 +158,8 @@ str_buf_cat(mrb_state *mrb, struct RString *s, const char *ptr, size_t len)
capa = RSTRING_EMBED_LEN_MAX;
else
capa = s->as.heap.aux.capa;
if (capa <= RSTRING_EMBED_LEN_MAX)
capa = RSTRING_EMBED_LEN_MAX+1;

total = RSTR_LEN(s)+len;
if (total >= MRB_INT_MAX) {

0 comments on commit 342b1de

Please sign in to comment.