ruby.git/sprintf.c, branch v1_8_7_299

* array.c (ary_new, rb_ary_initialize, rb_ary_store,

2008-06-19T23:12:46+00:00

  rb_ary_aplice, rb_ary_times): integer overflows should be
  checked. based on patches from Drew Yao 
  fixed CVE-2008-2726

* string.c (rb_str_buf_append): fixed unsafe use of alloca,
  which led memory corruption. based on a patch from Drew Yao
   fixed CVE-2008-2726

* sprintf.c (rb_str_format): backported from trunk.

* intern.h: ditto.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_7@17460 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

Merge changes from ruby_1_8 to reduce warnings and potentially improve

2008-06-06T10:39:57+00:00

security.

* mkconfig.rb: hide build path from rbconfig.rb.

* util.c (ruby_strtod, dtoa): initialize more variables for error
  handling.

* io.c (rscheck), marshal.c (w_nbyte, w_bytes, w_unique),
  (path2class, path2module): constified.

* pack.c (pack_unpack), process.c (rb_syswait): suppress warnings.

* suppress warnings on cygwin, mingw and mswin.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_7@16863 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

Merge from ruby_1_8.

2008-05-19T05:44:47+00:00

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_7@16475 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

Merge from ruby_1_8.

2008-04-22T17:29:39+00:00

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_7@16166 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* bignum.c (rb_big2str0): do not clobber space for sign.

2007-11-28T00:51:44+00:00

* sprintf.c (remove_sign_bits): extends sign bit first.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@14037 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* sprintf.c (rb_f_sprintf): should not check positional number as

2007-08-02T04:46:41+00:00

  width.  [ruby-core:11838]


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@12861 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* sprintf.c (rb_f_sprintf): more checks for format argument.

2007-07-15T20:45:55+00:00

  [ruby-core:11569], [ruby-core:11570], [ruby-core:11571],
  [ruby-core:11573]


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@12803 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* sprintf.c (rb_f_sprintf): sign bit extension should not be done

2007-07-02T05:34:45+00:00

  if FPLUS flag is specified.  [ruby-list:39224]


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@12679 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* sprintf.c (rb_f_sprintf): need not to truncate string if no

2006-11-27T08:20:41+00:00

  width specifier given for %s.  [ruby-dev:29952]


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@11311 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* sprintf.c (rb_str_format): should preserve leading zero

2006-10-30T02:24:08+00:00

  information for negative %b and %x.  [ruby-talk:221347]


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@11236 b2dd03c8-39d4-4d8f-98ff-823fe69b080e