Add negative check in `mrb_str_resize`; fix #4062

695f29cd · Yukihiro "Matz" Matsumoto · 7e798405 · 695f29cd
Commit 695f29cd authored Jun 27, 2018 by Yukihiro "Matz" Matsumoto
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

src/string.c src/string.c +3 -0

No files found.
--- a/src/string.c
+++ b/src/string.c
@@ -708,6 +708,9 @@ mrb_str_resize(mrb_state *mrb, mrb_value str, mrb_int len)
  mrb_int slen;
  struct RString *s = mrb_str_ptr(str);
+  if (len < 0) {
+    mrb_raisef(mrb, E_ARGUMENT_ERROR, "negative (or overflowed) string size");
+  }
  mrb_str_modify(mrb, s);
  slen = RSTR_LEN(s);
  if (len != slen) {