sql: fix integer overflow in built-in functions
This patch replaces the type for some int and uint32_t values with size_t to avoid problems with integer overflow. Closes tarantool/security#119 NO_DOC=bugfix
Showing
- changelogs/unreleased/ghs-119-too-long-mem-values.md 3 additions, 0 deletionschangelogs/unreleased/ghs-119-too-long-mem-values.md
- src/box/sql/func.c 140 additions, 68 deletionssrc/box/sql/func.c
- src/box/sql/mem.c 60 additions, 59 deletionssrc/box/sql/mem.c
- src/box/sql/mem.h 33 additions, 23 deletionssrc/box/sql/mem.h
- src/box/sql/vdbe.c 1 addition, 1 deletionsrc/box/sql/vdbe.c
- test/sql-luatest/ghs_119_too_long_mem_values_test.lua 73 additions, 0 deletionstest/sql-luatest/ghs_119_too_long_mem_values_test.lua
- test/sql-luatest/suite.ini 1 addition, 0 deletionstest/sql-luatest/suite.ini
Loading
Please register or sign in to comment