OP_ARRAY may overflow ARG_C

318ad9c8 · Yukihiro Matz Matsumoto · aa73a106 · 318ad9c8
Commit 318ad9c8 authored Mar 09, 2013 by Yukihiro Matz Matsumoto
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

src/codegen.c src/codegen.c +1 -1

No files found.
--- a/src/codegen.c
+++ b/src/codegen.c
@@ -708,7 +708,7 @@ gen_values(codegen_scope *s, node *t, int val)
  int n = 0;

  while (t) {
-    if ((intptr_t)t->car->car == NODE_SPLAT) { // splat mode
+    if (n >= 127 || (intptr_t)t->car->car == NODE_SPLAT) { // splat mode
      if (val) {
        pop_n(n);
        genop(s, MKOP_ABC(OP_ARRAY, cursp(), cursp(), n));