提交 e1a5ce6a 编写于 作者: Q Qunxin Liu 提交者: Behdad Esfahbod

Fix fuzzer crash testcase

Add a check for stringOffSet(uint16) overflow,
return early if overflow happens
上级 d100ccad
......@@ -186,7 +186,7 @@ struct name
auto snap = c->snapshot ();
this->nameRecordZ.serialize (c, this->count);
this->stringOffset = c->length ();
if (unlikely (!c->check_assign (this->stringOffset, c->length ()))) return_trace (false);
c->revert (snap);
const void *dst_string_pool = &(this + this->stringOffset);
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册