From e9fd4ccf0ccccb2db3c416b5f6ae05d1344c838d Mon Sep 17 00:00:00 2001 From: Max Brunsfeld Date: Thu, 25 Apr 2024 13:51:05 -0700 Subject: [PATCH] Guard against serialization buffer overflows from wasm languages --- lib/src/wasm_store.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lib/src/wasm_store.c b/lib/src/wasm_store.c index 34c39e8f..054013b1 100644 --- a/lib/src/wasm_store.c +++ b/lib/src/wasm_store.c @@ -1642,6 +1642,10 @@ uint32_t ts_wasm_store_call_scanner_serialize( if (self->has_error) return 0; uint32_t length = args[0].i32; + if (length > TREE_SITTER_SERIALIZATION_BUFFER_SIZE) { + self->has_error = true; + return 0; + } if (length > 0) { memcpy(