diff options
-rw-r--r-- | ChangeLog | 5 | ||||
-rw-r--r-- | pack.c | 3 |
2 files changed, 8 insertions, 0 deletions
@@ -1,3 +1,8 @@ +Fri Oct 8 09:49:32 2004 Yukihiro Matsumoto <matz@ruby-lang.org> + + * pack.c (pack_pack): pointer modification check before each + iteration. [ruby-dev:24445] + Fri Oct 8 01:13:05 2004 Hidetoshi NAGAI <nagai@ai.kyutech.ac.jp> * ext/tk/lib/tk/optiondb.rb: make it more secure @@ -499,6 +499,9 @@ pack_pack(ary, fmt) #define NEXTFROM (items-- > 0 ? RARRAY(ary)->ptr[idx++] : (rb_raise(rb_eArgError, toofew),0)) while (p < pend) { + if (RSTRING(fmt)->ptr + RSTRING(fmt)->len != pend) { + rb_raise(rb_eRuntimeError, "format string modified"); + } type = *p++; /* get data type */ #ifdef NATINT_PACK natint = 0; |