lua

commit 1bdc328c7542fac5101684a4ac31a25be3dff112
parent e3d52da144dcb1179988ba315a6cb6703fe9a4f8
Author: Roberto Ierusalimschy <roberto@inf.puc-rio.br>
Date:   Fri, 19 May 2017 09:58:13 -0300

bug: Lua crashes when building sequences with more than 2^30 elements.
bug: Table length computation overflows for sequences larger than
2^31 elements..

Diffstat:
M
bugs
 | 
53
+++++++++++++++++++++++++++++++++++++++++++++++++++--

1 file changed, 51 insertions(+), 2 deletions(-)
diff --git a/bugs b/bugs
@@ -3656,9 +3656,9 @@ It needs an "interceptor" 'memcmp' function that continues
 reading memory after a difference is found.]],
 patch = [[
 2c2
-< ** $Id: bugs,v 1.151 2016/10/19 12:34:27 roberto Exp roberto $
+< ** $Id: bugs,v 1.152 2017/05/05 15:55:36 roberto Exp roberto $
 ---
-> ** $Id: bugs,v 1.151 2016/10/19 12:34:27 roberto Exp roberto $
+> ** $Id: bugs,v 1.152 2017/05/05 15:55:36 roberto Exp roberto $
 263c263,264
 <   for (option = LUA_STRFTIMEOPTIONS; *option != '\0'; option += oplen) {
 ---
@@ -3746,6 +3746,55 @@ patch = [[
 }
 
 
+Bug{
+what = [[Lua crashes when building sequences with more than 2^30 elements.]],
+report = [[Viacheslav Usov, 2017/05/11]],
+since = [[ ]],
+fix = nil,
+example = [[
+-- crashes if machine has enough memory
+local t = {}
+for i = 1, 0x7fffffff do
+  t[i] = i
+end
+]],
+patch = [[
+]]
+}
+
+
+Bug{
+what = [[Table length computation overflows for sequences larger than
+2^31 elements.]],
+report = [[Viacheslav Usov, 2017/05/12]],
+since = [[ ]],
+fix = nil,
+example = [[
+-- on a machine with enough memory
+local t = {}
+for i = 1, 2147483681 do
+  t[i] = i
+end
+print(#t)
+]],
+patch = [[
+]]
+}
+
+
+--[=[
+Bug{
+what = [[ ]],
+report = [[ ]],
+since = [[ ]],
+fix = nil,
+example = [[ ]],
+patch = [[
+]]
+}
+]=]
+
+
 --[=[
 Bug{
 what = [[ ]],