diff options
| author | shyouhei <shyouhei@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-06-19 23:12:46 +0000 |
|---|---|---|
| committer | shyouhei <shyouhei@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-06-19 23:12:46 +0000 |
| commit | 95641468fff6718d773589fa78ec7a744fd652c5 (patch) | |
| tree | 51584d2db08f93d52c959a70299b9aae492b4075 /include | |
| parent | 5c1f5b240ee1443250026f288380930bbad67325 (diff) | |
| download | ruby-95641468fff6718d773589fa78ec7a744fd652c5.tar.gz ruby-95641468fff6718d773589fa78ec7a744fd652c5.tar.xz ruby-95641468fff6718d773589fa78ec7a744fd652c5.zip | |
* array.c (ary_new, rb_ary_initialize, rb_ary_store,
rb_ary_aplice, rb_ary_times): integer overflows should be
checked. based on patches from Drew Yao <ayao at apple.com>
fixed CVE-2008-2726
* string.c (rb_str_buf_append): fixed unsafe use of alloca,
which led memory corruption. based on a patch from Drew Yao
<ayao at apple.com> fixed CVE-2008-2726
* sprintf.c (rb_str_format): backported from trunk.
* intern.h: ditto.
git-svn-id: http://svn.ruby-lang.org/repos/ruby/trunk@17460 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions