archive/ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2025-08-15 13:39:04 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Fix dtoa buffer overrun

Browse source 
https://hackerone.com/reports/1248108
This commit is contained in:
Nobuyoshi Nakada 2021-07-01 06:39:17 +09:00
parent cf2bbcfff2
commit d0a822eec5
Notes: git 2022-04-12 21:31:09 +09:00
2 changed files with 20 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
missing/dtoa.c
View file

@ -1552,6 +1552,7 @@ break2:
if (!*++s || !(s1 = strchr(hexdigit, *s))) goto ret0;
if (*s == '0') {
while (*++s == '0');
if (!*s) goto ret;
s1 = strchr(hexdigit, *s);
}
if (s1 != NULL) {
@ -1574,7 +1575,7 @@ break2:
for (; *s && (s1 = strchr(hexdigit, *s)); ++s) {
adj += aadj * ((s1 - hexdigit) & 15);
if ((aadj /= 16) == 0.0) {
while (strchr(hexdigit, *++s));
while (*++s && strchr(hexdigit, *s));
break;
}
}