File CVE-2021-41556.patch of Package squirrel.17871
From 23a0620658714b996d20da3d4dd1a0dcf9b0bd98 Mon Sep 17 00:00:00 2001
From: albertodemichelis <alberto@qnsoftware.com>
Date: Thu, 16 Sep 2021 22:36:53 +0800
Subject: [PATCH] check max member count in class
---
squirrel/sqclass.cpp | 3 +++
squirrel/sqclass.h | 1 +
2 files changed, 4 insertions(+)
Index: SQUIRREL3/squirrel/sqclass.cpp
===================================================================
--- SQUIRREL3.orig/squirrel/sqclass.cpp
+++ SQUIRREL3/squirrel/sqclass.cpp
@@ -61,6 +61,9 @@ bool SQClass::NewSlot(SQSharedState *ss,
_defaultvalues[_member_idx(temp)].val = val;
return true;
}
+ if (_members->CountUsed() >= MEMBER_MAX_COUNT) {
+ return false;
+ }
if(belongs_to_static_table) {
SQInteger mmidx;
if((type(val) == OT_CLOSURE || type(val) == OT_NATIVECLOSURE) &&
Index: SQUIRREL3/squirrel/sqclass.h
===================================================================
--- SQUIRREL3.orig/squirrel/sqclass.h
+++ SQUIRREL3/squirrel/sqclass.h
@@ -17,6 +17,7 @@ typedef sqvector<SQClassMember> SQClassM
#define MEMBER_TYPE_METHOD 0x01000000
#define MEMBER_TYPE_FIELD 0x02000000
+#define MEMBER_MAX_COUNT 0x00FFFFFF
#define _ismethod(o) (_integer(o)&MEMBER_TYPE_METHOD)
#define _isfield(o) (_integer(o)&MEMBER_TYPE_FIELD)