mirrors/ladybird
0
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2025-07-29 12:19:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

LibWasm: Limit the number of function locals

Browse source 
It's possible for the module to request too many locals, we now reject
such modules instead of trying to allocate space for them.
The value itself is chosen arbitrarily, so future tweaks _might_ be
necessary.
Found by OSS-Fuzz: https://oss-fuzz.com/testcase?key=4755809098661888
This commit is contained in:
Ali Mohammad Pur 2021-08-30 23:37:29 +04:30 • committed by Andreas Kling
commit b64d6bb3a3
Notes: sideshowbarker 2024-07-18 05:01:32 +09:00
2 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
Userland/Libraries/LibWasm/Parser/Parser.cpp
View file

@ -1091,7 +1091,10 @@ ParseResult<Locals> Locals::parse(InputStream& stream)
size_t count;
if (!LEB128::read_unsigned(stream, count))
return with_eof_check(stream, ParseError::InvalidSize);
// TODO: Disallow too many entries.
if (count > Constants::max_allowed_function_locals_per_type)
return with_eof_check(stream, ParseError::HugeAllocationRequested);
auto type = ValueType::parse(stream);
if (type.is_error())
return type.error();