Under MRB_INT64, width may be bigger than INT_MAX; fix #3665

mruby · May 25, 2017 · 3ef97e3dd9fdd31ecca30d04d0fc3783ca8dab58 · 3ef97e3
1 parent 9bca887
commit 3ef97e3dd9fdd31ecca30d04d0fc3783ca8dab58
Unified Split

Showing with 3 additions and 0 deletions.

+3 −0 mrbgems/mruby-sprintf/src/sprintf.c
diff --git a/mrbgems/mruby-sprintf/src/sprintf.c b/mrbgems/mruby-sprintf/src/sprintf.c
@@ -1034,6 +1034,9 @@ mrb_str_format(mrb_state *mrb, int argc, const mrb_value *argv, mrb_value fmt)
          if ((flags & FWIDTH) && need < width)
            need = width;

+          if (need < 0) {
+            mrb_raise(mrb, E_ARGUMENT_ERROR, "width too big");
+          }
          FILL(' ', need);
          if (flags & FMINUS) {
            if (sign)