mirror of
https://github.com/janet-lang/janet
synced 2025-06-06 08:34:13 +00:00
Merge pull request #1593 from agent-kilo/thread-message-size-check
Try to fix cfun registry size check for cross-thread messages
This commit is contained in:
commit
523639362c
@ -3015,7 +3015,8 @@ static JanetEVGenericMessage janet_go_thread_subr(JanetEVGenericMessage args) {
|
|||||||
uint32_t count1;
|
uint32_t count1;
|
||||||
memcpy(&count1, nextbytes, sizeof(count1));
|
memcpy(&count1, nextbytes, sizeof(count1));
|
||||||
size_t count = (size_t) count1;
|
size_t count = (size_t) count1;
|
||||||
if (count > (endbytes - nextbytes) * sizeof(JanetCFunRegistry)) {
|
/* Use division to avoid overflowing size_t */
|
||||||
|
if (count > (endbytes - nextbytes - sizeof(count1)) / sizeof(JanetCFunRegistry)) {
|
||||||
janet_panic("thread message invalid");
|
janet_panic("thread message invalid");
|
||||||
}
|
}
|
||||||
janet_vm.registry_count = count;
|
janet_vm.registry_count = count;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user