[Date Prev][Date Next][Thread Prev][Thread Next]
[Date Index]
[Thread Index]
- Subject: Bug report : (lstring.c:210) (ts)->shrlen != 0xFF
- From: 云风 Cloud Wu <cloudwu@...>
- Date: Thu, 31 Aug 2023 17:24:38 +0800
I updated lua source from https://github.com/lua/lua today, and my
project crashed.
I found the TString is not initialized before getshrstr().
https://github.com/lua/lua/blob/master/lstring.c#L209-L211
I think it should be :
ts = createstrobj(L, l, LUA_VSHRSTR, h);
ts->shrlen = cast_byte(l);
memcpy(getshrstr(ts), str, l * sizeof(char));
The `ts->shrlen` should be initialized before memcpy().
--
http://blog.codingnow.com