diff options
| author | Sverker Eriksson <[email protected]> | 2013-11-27 19:43:57 +0100 |
|---|---|---|
| committer | Sverker Eriksson <[email protected]> | 2013-11-27 19:43:57 +0100 |
| commit | 3e2a0ea59898ba214197b7a6f5df526d80697b7a (patch) | |
| tree | abe4c522984b46fd1277e05c2ec0d7c1c1efdf3a /erts/emulator/beam/external.c | |
| parent | d9ea7e090a4761f0ec42f727a67463f8b71f6544 (diff) | |
| parent | 06188473247fd1edc873d82cf07886fa7e53e8cb (diff) | |
| download | otp-3e2a0ea59898ba214197b7a6f5df526d80697b7a.tar.gz otp-3e2a0ea59898ba214197b7a6f5df526d80697b7a.tar.bz2 otp-3e2a0ea59898ba214197b7a6f5df526d80697b7a.zip | |
Merge branch 'maint'
Diffstat (limited to 'erts/emulator/beam/external.c')
| -rw-r--r-- | erts/emulator/beam/external.c | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/erts/emulator/beam/external.c b/erts/emulator/beam/external.c index 1c88765381..22b0a02937 100644 --- a/erts/emulator/beam/external.c +++ b/erts/emulator/beam/external.c @@ -2970,7 +2970,7 @@ dec_term_atom_common: n = get_int32(ep); ep += 4; - if (n <= ERL_ONHEAP_BIN_LIMIT) { + if ((unsigned)n <= ERL_ONHEAP_BIN_LIMIT) { ErlHeapBin* hb = (ErlHeapBin *) hp; hb->thing_word = header_heap_bin(n); @@ -3007,8 +3007,10 @@ dec_term_atom_common: n = get_int32(ep); bitsize = ep[4]; - ep += 5; - if (n <= ERL_ONHEAP_BIN_LIMIT) { + if (((bitsize==0) != (n==0)) || bitsize > 8) + goto error; + ep += 5; + if ((unsigned)n <= ERL_ONHEAP_BIN_LIMIT) { ErlHeapBin* hb = (ErlHeapBin *) hp; hb->thing_word = header_heap_bin(n); @@ -3035,10 +3037,10 @@ dec_term_atom_common: hp += PROC_BIN_SIZE; } ep += n; - if (bitsize == 0) { + if (bitsize == 8 || n == 0) { *objp = bin; } else { - sb = (ErlSubBin *) hp; + sb = (ErlSubBin *)hp; sb->thing_word = HEADER_SUB_BIN; sb->orig = bin; sb->size = n - 1; |