mirror of
https://github.com/micropython/micropython.git
synced 2026-01-07 20:50:14 +01:00
py/vstr: Raise a RuntimeError if fixed vstr buffer overflows.
Current users of fixed vstr buffers (building file paths) assume that there is no overflow and do not check for overflow after building the vstr. This has the potential to lead to NULL pointer dereferences (when vstr_null_terminated_str returns NULL because it can't allocate RAM for the terminating byte) and stat'ing and loading invalid path names (due to the path being truncated). The safest and simplest thing to do in these cases is just raise an exception if a write goes beyond the end of a fixed vstr buffer, which is what this patch does. It also simplifies the vstr code.
This commit is contained in:
@@ -18,7 +18,8 @@ sts
|
||||
|
||||
test
|
||||
tes
|
||||
larg
|
||||
RuntimeError:
|
||||
RuntimeError:
|
||||
# repl
|
||||
ame__
|
||||
|
||||
|
||||
Reference in New Issue
Block a user