Fix fuzzer crash testcase
Add a check for stringOffSet(uint16) overflow, return early if overflow happens
This commit is contained in:
parent
d100ccad02
commit
e1a5ce6aa6
|
@ -186,7 +186,7 @@ struct name
|
|||
|
||||
auto snap = c->snapshot ();
|
||||
this->nameRecordZ.serialize (c, this->count);
|
||||
this->stringOffset = c->length ();
|
||||
if (unlikely (!c->check_assign (this->stringOffset, c->length ()))) return_trace (false);
|
||||
c->revert (snap);
|
||||
|
||||
const void *dst_string_pool = &(this + this->stringOffset);
|
||||
|
|
Binary file not shown.
Binary file not shown.
Loading…
Reference in New Issue