YourWishes/jerryscript
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed segmentation fault in scanner. (#3444)

Browse Source 
The register end index was not correctly calculated when
only holes presented in the arguments list of a function.

Fixes #3419, fixes #3431

JerryScript-DCO-1.0-Signed-off-by: László Langó lango@inf.u-szeged.hu
This commit is contained in:
László Langó
2019-12-12 12:17:45 +01:00
committed by GitHub
parent fb4b18a515
commit c525b1f10a
3 changed files with 53 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
jerry-core/parser/js/js-scanner-util.c
+6 -7
View File
@@ -1760,16 +1760,13 @@ scanner_create_variables (parser_context_t *context_p, /**< context */
size_t stack_size = info_p->u16_arg * sizeof (parser_scope_stack);
context_p->scope_stack_size = info_p->u16_arg;
if (stack_size == 0)
scope_stack_p = NULL;
if (stack_size > 0)
{
if (!(option_flags & SCANNER_CREATE_VARS_IS_FUNCTION_ARGS))
{
scanner_release_next (context_p, sizeof (scanner_info_t) + 1);
}
return;
scope_stack_p = (parser_scope_stack *) parser_malloc (context_p, stack_size);
}
scope_stack_p = (parser_scope_stack *) parser_malloc (context_p, stack_size);
context_p->scope_stack_p = scope_stack_p;
scope_stack_end_p = scope_stack_p + context_p->scope_stack_size;
}
@@ -1821,6 +1818,8 @@ scanner_create_variables (parser_context_t *context_p, /**< context */
continue;
}
JERRY_ASSERT (context_p->scope_stack_size != 0);
if (!(data_p[0] & SCANNER_STREAM_UINT16_DIFF))
{
if (data_p[2] != 0)