ilusha/lua
1
0
Fork 0
mirror of https://github.com/lua/lua synced 2026-09-29 04:35:58 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Bug: Constructors with nils can overflow counters

Browse source
This commit is contained in:
Roberto Ierusalimschy 2025-08-27 14:58:02 -03:00
parent 9ac9d23f41
commit 934fdd481c
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lparser.c
View file

@ -940,6 +940,8 @@ static void constructor (LexState *ls, expdesc *t) {
if (ls->t.token == '}') break;
closelistfield(fs, &cc);
field(ls, &cc);
checklimit(fs, cc.tostore + cc.na + cc.nh, INT_MAX/2,
"items in a constructor");
} while (testnext(ls, ',') || testnext(ls, ';'));
check_match(ls, '}', '{', line);
lastlistfield(fs, &cc);