Roberto Ierusalimschy
57f5b81da9
Bug: Long brackets with a huge number of '=' causes overflow
...
A long bracket with too many equal signs can overflow the 'int' used for
the counting and some arithmetic done on the value. Changing the counter
to 'size_t' avoids that. (Because what is counted goes to a buffer, an
overflow in the counter will first raise a buffer-overflow error.)
2018-12-14 13:12:01 -02:00
Roberto Ierusalimschy
c5dc521d65
added patch for bug 5.3.4-7
2018-06-08 13:23:18 -03:00
Roberto Ierusalimschy
3b8dba5279
added patches for two bugs (5.3.4-2 and 5.3.4-3)
2018-05-24 17:25:14 -03:00
Roberto Ierusalimschy
e752d84ed8
bug: memory-allocation error when resizing a table can leave it
...
in an inconsistent state.
2017-12-13 16:35:03 -02:00
Roberto Ierusalimschy
348fa1ca56
bug: 'lua_pushcclosure' should not call the garbage collector when
...
'n' is zero.
2017-12-06 16:20:28 -02:00
Roberto Ierusalimschy
029d269f4d
bug: dead keys with nil values can stay in weak tables
2017-08-31 13:14:41 -03:00
Roberto Ierusalimschy
f185c0132e
comment in code fragment
2017-08-12 10:12:42 -03:00
Roberto Ierusalimschy
4053eae9eb
bug: Lua does not check GC when creating error messages
2017-07-27 10:55:38 -03:00
Roberto Ierusalimschy
03094da80c
detail (extra closing brackets)
2017-05-22 09:55:16 -03:00
Roberto Ierusalimschy
1bdc328c75
bug: Lua crashes when building sequences with more than 2^30 elements.
...
bug: Table length computation overflows for sequences larger than
2^31 elements..
2017-05-19 09:58:40 -03:00
Roberto Ierusalimschy
4ce8d2047c
bug: Wrong code for a goto followed by a label inside an 'if'
2017-05-05 12:55:36 -03:00
Roberto Ierusalimschy
697593d8d5
bug: When a coroutine tries to resume a non-suspended coroutine,
...
it can do some mess (and break C assertions) before detecting the error.
2016-10-19 10:34:27 -02:00
Roberto Ierusalimschy
fc6b32bcaa
bug: Lua can generate wrong code in functions with too many constants
2016-07-19 14:12:07 -03:00
Roberto Ierusalimschy
788109a3de
new bug: Checking a format for 'os.date' may read pass the format string
2016-07-15 14:24:09 -03:00
Roberto Ierusalimschy
fac00ca023
bug: expression list with four or more expressions in
...
a 'for' loop can crash the interpreter.
2016-06-21 14:22:34 -03:00
Roberto Ierusalimschy
c258870c59
diff for last bug was against wrong version
2016-04-11 12:34:21 -03:00
Roberto Ierusalimschy
acff3ad88d
bug: 'gmatch' iterator fails when called from a coroutine different
...
from the one that created it
2016-03-23 14:12:17 -03:00
Roberto Ierusalimschy
e7b2e01d43
bug: label between local definitions can mix-up their initializations
2016-03-07 16:25:39 -03:00
Roberto Ierusalimschy
7cd7c2e0a1
Metatable may access its own dealocated field when
...
it has a self reference in __newindex.
2016-01-04 11:35:56 -02:00
Roberto Ierusalimschy
d682b3c9ec
added separator for bugs in 5.3.1
2015-11-13 15:19:07 -02:00
Roberto Ierusalimschy
935d9f7f90
new entry should not be commented out
2015-07-23 11:32:17 -03:00
Roberto Ierusalimschy
b5dc2f9b0c
bug: 'io.lines' does not check maximum number of options
2015-07-20 13:37:12 -03:00
Roberto Ierusalimschy
afbf5c5dab
missing ']]' in long string
2015-06-18 11:05:28 -03:00
Roberto Ierusalimschy
02aed045de
bug: return hook may not see correct values for active local variables
...
when function returns
2015-05-22 16:32:42 -03:00
Roberto Ierusalimschy
513c639bf9
patch for last bug corrected to be against last released version
...
(and not against last version in RCS...)
2015-04-13 13:13:25 -03:00
Roberto Ierusalimschy
ae76c39712
Bug: suspended '__le' metamethod can give wrong result
2015-04-10 14:56:25 -03:00
Roberto Ierusalimschy
27c5b1b237
added patches to two bugs
2015-02-23 16:20:43 -03:00
Roberto Ierusalimschy
d51bdc166d
bug: 'string.format("%f")' can cause a buffer overflow (with long doubles)
...
bug: 'debug.getlocal' on a coroutine suspended in a hook can crash
the interpreter
2015-02-20 16:21:29 -02:00
Roberto Ierusalimschy
7e425be975
bug (in 5.2): Chunk with too many lines can seg. fault
2015-02-09 15:57:45 -02:00
Roberto Ierusalimschy
001bb46ae1
bug: Ephemeron table can wrongly collect entry with strong key
2014-09-01 13:56:01 -03:00
Roberto Ierusalimschy
ef83457427
updated several 'fix' fields
2014-05-07 13:57:27 -03:00
Roberto Ierusalimschy
4833fb8273
marks for releases 5.2.2 and 5.2.3 + correction in last bug's description
2014-05-07 13:35:24 -03:00
Roberto Ierusalimschy
007f66408d
bug: compiler can optimize away overflow check in 'table.concat'
2014-04-03 10:30:23 -03:00
Roberto Ierusalimschy
e34c35abcf
new bug: Resuming the running coroutine makes it unyieldable
2013-11-08 16:23:16 -02:00
Roberto Ierusalimschy
ab5fa213b3
added patch for last bug
2013-11-08 15:45:10 -02:00
Roberto Ierusalimschy
aeff4f79fa
local collection now calls finalizers
2013-09-03 12:37:10 -03:00
Roberto Ierusalimschy
4f292d753c
bug: GC can collect a long string still in use during parser
2013-08-30 12:51:12 -03:00
Roberto Ierusalimschy
48735da0d0
When loading a file, Lua may call the reader function again after
...
it returned end of input + luac listings choke on long strings
2013-07-05 15:02:28 -03:00
Roberto Ierusalimschy
2d6a0ae149
added patch to last bug
2013-05-16 13:03:50 -03:00
Roberto Ierusalimschy
bef345a4b8
bug: Wrong error message in some short-cut expressions
2013-05-13 13:17:47 -03:00
Roberto Ierusalimschy
2b1c2c61b0
bug: Wrong assert when reporting concatenation errors.
2013-05-06 14:21:28 -03:00
Roberto Ierusalimschy
6347004be9
stack overflow in vararg functions + garbage collector in recursive loops
2013-05-02 13:13:27 -03:00
Roberto Ierusalimschy
ad56721948
details (5.2 corrected to 5.2.0)
2013-02-07 13:57:47 -02:00
Roberto Ierusalimschy
65e31fb179
Bug: load/loadfile returns wrong result when given an environment
...
for a binary chunk with no upvalues
2012-12-03 18:18:02 -02:00
Roberto Ierusalimschy
adaba04059
'pcall' may not restore previous error function when
...
inside coroutines + Check for garbage collector in function calls
does not cover all paths
2012-10-01 11:05:31 -03:00
Roberto Ierusalimschy
2038073975
more regularity for field 'fix'
2012-09-11 09:42:14 -03:00
Roberto Ierusalimschy
763f84c84c
Some patterns can overflow the C stack, due to recursion.
2012-07-13 11:53:38 -03:00
Roberto Ierusalimschy
78d9865900
bugs: Internal Lua values may escape through the debug API +
...
Problems when yielding from debug hooks
2012-06-11 14:49:37 -03:00
Roberto Ierusalimschy
4ec7d6de95
bug: wrong handling of 'nCcalls' in coroutines
2012-05-11 11:10:28 -03:00
Roberto Ierusalimschy
1485ea2ee7
Finalizers may call functions from a dynamic library after
...
the library has been unloaded
2012-04-12 13:25:25 -03:00
