Permalink
Browse files

Check overflow string length

Fix #3360
  • Loading branch information...
ksss committed Dec 23, 2016
1 parent 987daa6 commit c626b823cabf8ee7acbdf57e44597de3974c5f17
Showing with 3 additions and 0 deletions.
  1. +3 −0 src/string.c
View
@@ -756,6 +756,9 @@ mrb_str_concat(mrb_state *mrb, mrb_value self, mrb_value other)
s2 = mrb_str_ptr(other);
len = RSTR_LEN(s1) + RSTR_LEN(s2);
if (len < 0 || len >= MRB_INT_MAX) {
mrb_raise(mrb, E_ARGUMENT_ERROR, "string size too big");
}
if (RSTRING_CAPA(self) < len) {
resize_capa(mrb, s1, len);
}

0 comments on commit c626b82

Please sign in to comment.