lua

commit 6d182faab65f7634802904c489de6dabcb56830a
parent f86f4116c82654d24faa4a32a909d0c27f3d4746
Author: Roberto Ierusalimschy <roberto@inf.puc-rio.br>
Date:   Thu, 14 Feb 2008 14:02:35 -0200

bug: lua_checkstack may have arithmetic overflow for large 'size'

Diffstat:
M
lapi.c
 | 
9
++++-----

1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/lapi.c b/lapi.c
@@ -1,5 +1,5 @@
 /*
-** $Id: lapi.c,v 2.63 2008/01/25 13:42:12 roberto Exp roberto $
+** $Id: lapi.c,v 2.64 2008/02/12 13:34:12 roberto Exp roberto $
 ** Lua API
 ** See Copyright Notice in lua.h
 */
@@ -84,15 +84,14 @@ static Table *getcurrenv (lua_State *L) {
 
 
 LUA_API int lua_checkstack (lua_State *L, int size) {
-  int res;
+  int res = 1;
   lua_lock(L);
-  if ((L->top - L->base + size) > LUAI_MAXCSTACK)
+  if (size > LUAI_MAXCSTACK || (L->top - L->base + size) > LUAI_MAXCSTACK)
     res = 0;  /* stack overflow */
-  else {
+  else if (size > 0) {
     luaD_checkstack(L, size);
     if (L->ci->top < L->top + size)
       L->ci->top = L->top + size;
-    res = 1;
   }
   lua_unlock(L);
   return res;