Commit 57bb21b

committed

fix heap-buffer-overflow in lexer_compare_identifier_to_char

JerryScript-DCO-1.0-Signed-off-by: tangbin 2387440390@qq.com

1 parent 5020015 commit 57bb21bCopy full SHA for 57bb21b

File tree

+26

-2

lines changed

+26

-2

lines changed

Lines changed: 2 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -3322,7 +3322,7 @@ lexer_compare_identifier_to_chars (const uint8_t left_p, /< left identifier `
`3322`	`3322`	`{`
`3323`	`3323`	`uint8_t utf8_buf[6];`
`3324`	`3324`
`3325`		`- do`
	`3325`	`+ while (size>0)`
`3326`	`3326`	`{`
`3327`	`3327`	`if (left_p == right_p)`
`3328`	`3328`	`{`
`@@ -3362,7 +3362,7 @@ lexer_compare_identifier_to_chars (const uint8_t left_p, /< left identifier `
`3362`	`3362`	`return false;`
`3363`	`3363`	`}`
`3364`	`3364`	`} while (--escape_size > 0);`
`3365`		`- }while (size>0);`
	`3365`	`+ }`
`3366`	`3366`
`3367`	`3367`	`return true;`
`3368`	`3368`	`} /* lexer_compare_identifier_to_chars */`

Lines changed: 24 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,24 @@`
	`1`	`+// Copyright JS Foundation and other contributors, http://js.foundation`
	`2`	`+//`
	`3`	`+// Licensed under the Apache License, Version 2.0 (the "License");`
	`4`	`+// you may not use this file except in compliance with the License.`
	`5`	`+// You may obtain a copy of the License at`
	`6`	`+//`
	`7`	`+// http://www.apache.org/licenses/LICENSE-2.0`
	`8`	`+//`
	`9`	`+// Unless required by applicable law or agreed to in writing, software`
	`10`	`+// distributed under the License is distributed on an "AS IS" BASIS`
	`11`	`+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.`
	`12`	`+// See the License for the specific language governing permissions and`
	`13`	`+// limitations under the License.`
	`14`	`+`
	`15`	`+function check_syntax_error(code) {`
	`16`	`+ try {`
	`17`	`+ eval(code)`
	`18`	`+ assert(false)`
	`19`	`+ } catch (e) {`
	`20`	`+ assert(e instanceof SyntaxError)`
	`21`	`+ }`
	`22`	`+ }`
	`23`	`+`
	`24`	`+check_syntax_error("class C {#static async''");`

Comments

(0)