navigine/jq
1
0 Fork 0
mirror of https://github.com/jqlang/jq.git synced 2026-10-28 08:05:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

Limit number of function parameters and definitions to prevent SEGV (#3460)

Browse Source
This commit is contained in:
Ze Sheng authored and GitHub committed 2026-02-25 07:49:40 +09:00
1 parent b33a7634ba
commit a2741ee0a8
2 files changed
+41
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/compile.c
+14
View File
@@ -1241,6 +1241,13 @@ static int compile(struct bytecode* bc, block b, struct locfile* lf, jv args, jv
if (curr->op == CLOSURE_CREATE) {
assert(curr->bound_by == curr);
// Prevent subfunction index from overflowing into ARG_NEWCLOSURE flag
if (bc->nsubfunctions >= ARG_NEWCLOSURE) {
locfile_locate(lf, curr->source,
"too many function parameters or local function definitions (max %d)", ARG_NEWCLOSURE - 1);
errors++;
break;
}
curr->imm.intval = bc->nsubfunctions++;
}
if (curr->op == CLOSURE_CREATE_C) {
@@ -1274,6 +1281,13 @@ static int compile(struct bytecode* bc, block b, struct locfile* lf, jv args, jv
for (inst* param = curr->arglist.first; param; param = param->next) {
assert(param->op == CLOSURE_PARAM);
assert(param->bound_by == param);
// Prevent closure index from overflowing into ARG_NEWCLOSURE flag
if (subfn->nclosures >= ARG_NEWCLOSURE) {
locfile_locate(lf, curr->source,
"function has too many parameters (max %d)", ARG_NEWCLOSURE - 1);
errors++;
break;
}
param->imm.intval = subfn->nclosures++;
param->compiled = subfn;
params = jv_array_append(params, jv_string(param->symbol));