From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.2 required=5.0 tests=ALL_TRUSTED, DKIM_ADSP_NXDOMAIN,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.4 Received: (qmail 19907 invoked from network); 30 May 2023 16:01:58 -0000 Received: from localhost (HELO inbox.vuxu.org) (::1) by localhost with ESMTPUTF8; 30 May 2023 16:01:58 -0000 Content-Type: multipart/mixed; boundary="===============0930195050425639520==" MIME-Version: 1.0 Subject: =?utf8?q?=5BPR_PATCH=5D_quickjs=3A_Fix_stack_overflow_in_CVE-2023-31922?= To: ml@inbox.vuxu.org From: Gottox Reply-to: ml@inbox.vuxu.org Message-ID: Date: Tue, 30 May 2023 18:01:58 +0200 List-Id: GitHub notification mails are now in MIME to allow UTF8. --===============0930195050425639520== Content-Type: text/plain; charset="utf8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VGhlcmUgaXMgYSBuZXcgcHVsbCByZXF1ZXN0IGJ5IEdvdHRveCBhZ2FpbnN0IG1hc3RlciBvbiB0 aGUgdm9pZC1wYWNrYWdlcyByZXBvc2l0b3J5CgpodHRwczovL2dpdGh1Yi5jb20vR290dG94L3Zv aWQtcGFja2FnZXMgcXVpY2tqcy1jdmUtMjAyMy0zMTkyMgpodHRwczovL2dpdGh1Yi5jb20vdm9p ZC1saW51eC92b2lkLXBhY2thZ2VzL3B1bGwvNDQxNzMKCnF1aWNranM6IEZpeCBzdGFjayBvdmVy ZmxvdyBpbiBDVkUtMjAyMy0zMTkyMgo8IS0tIFVuY29tbWVudCByZWxldmFudCBzZWN0aW9ucyBh bmQgZGVsZXRlIG9wdGlvbnMgd2hpY2ggYXJlIG5vdCBhcHBsaWNhYmxlIC0tPg0KDQojIyMjIFRl c3RpbmcgdGhlIGNoYW5nZXMNCi0gSSB0ZXN0ZWQgdGhlIGNoYW5nZXMgaW4gdGhpcyBQUjogKipZ RVMqKg0KDQo8IS0tIE5vdGU6IElmIHRoZSBidWlsZCBpcyBsaWtlbHkgdG8gdGFrZSBtb3JlIHRo YW4gMiBob3VycywgcGxlYXNlIGFkZCBjaSBza2lwIHRhZyBhcyBkZXNjcmliZWQgaW4NCmh0dHBz Oi8vZ2l0aHViLmNvbS92b2lkLWxpbnV4L3ZvaWQtcGFja2FnZXMvYmxvYi9tYXN0ZXIvQ09OVFJJ QlVUSU5HLm1kI2NvbnRpbnVvdXMtaW50ZWdyYXRpb24NCmFuZCB0ZXN0IGF0IGxlYXN0IG9uZSBu YXRpdmUgYnVpbGQgYW5kLCBpZiBzdXBwb3J0ZWQsIGF0IGxlYXN0IG9uZSBjcm9zcyBidWlsZC4N Cklnbm9yZSB0aGlzIHNlY3Rpb24gaWYgdGhpcyBQUiBpcyBub3Qgc2tpcHBpbmcgQ0kuDQotLT4N CjwhLS0NCiMjIyMgTG9jYWwgYnVpbGQgdGVzdGluZw0KLSBJIGJ1aWx0IHRoaXMgUFIgbG9jYWxs eSBmb3IgbXkgbmF0aXZlIGFyY2hpdGVjdHVyZSwgKEFSQ0gtTElCQykNCi0gSSBidWlsdCB0aGlz IFBSIGxvY2FsbHkgZm9yIHRoZXNlIGFyY2hpdGVjdHVyZXMgKGlmIHN1cHBvcnRlZC4gbWFyayBj cm9zc2J1aWxkcyk6DQogIC0gYWFyY2g2NC1tdXNsDQogIC0gYXJtdjdsDQogIC0gYXJtdjZsLW11 c2wNCi0tPg0KCgpBIHBhdGNoIGZpbGUgZnJvbSBodHRwczovL2dpdGh1Yi5jb20vdm9pZC1saW51 eC92b2lkLXBhY2thZ2VzL3B1bGwvNDQxNzMucGF0Y2ggaXMgYXR0YWNoZWQ= --===============0930195050425639520== Content-Type: text/x-diff MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="github-pr-quickjs-cve-2023-31922-44173.patch" RnJvbSBkMWIwMjQxMzg4NDA5OWJkMmM0MzhhNjQxNmI2NzRhM2E4NTVjYWU0IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBFbm5vIEJvbGFuZCA8Z290dG94QHZvaWRsaW51eC5vcmc+CkRh dGU6IFR1ZSwgMzAgTWF5IDIwMjMgMTg6MDA6NDUgKzAyMDAKU3ViamVjdDogW1BBVENIXSBxdWlj a2pzOiBGaXggc3RhY2sgb3ZlcmZsb3cgaW4gQ1ZFLTIwMjMtMzE5MjIKCi0tLQogLi4uL3BhdGNo LWdoLWlzc3VlLTE3OC1jdmUtMjAyMy0zMTkyMi5wYXRjaCAgIHwgNDIgKysrKysrKysrKysrKysr KysrKwogMSBmaWxlIGNoYW5nZWQsIDQyIGluc2VydGlvbnMoKykKIGNyZWF0ZSBtb2RlIDEwMDY0 NCBzcmNwa2dzL3F1aWNranMvcGF0Y2hlcy9wYXRjaC1naC1pc3N1ZS0xNzgtY3ZlLTIwMjMtMzE5 MjIucGF0Y2gKCmRpZmYgLS1naXQgYS9zcmNwa2dzL3F1aWNranMvcGF0Y2hlcy9wYXRjaC1naC1p c3N1ZS0xNzgtY3ZlLTIwMjMtMzE5MjIucGF0Y2ggYi9zcmNwa2dzL3F1aWNranMvcGF0Y2hlcy9w YXRjaC1naC1pc3N1ZS0xNzgtY3ZlLTIwMjMtMzE5MjIucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2 NDQKaW5kZXggMDAwMDAwMDAwMDAwLi43NTQ5MjRjNjA2MzkKLS0tIC9kZXYvbnVsbAorKysgYi9z cmNwa2dzL3F1aWNranMvcGF0Y2hlcy9wYXRjaC1naC1pc3N1ZS0xNzgtY3ZlLTIwMjMtMzE5MjIu cGF0Y2gKQEAgLTAsMCArMSw0MiBAQAorRnJvbSAwNTY0NTkzMTQzMDVmNjY2YWVlMTMyNTY1ZGY3 MTBjNDJmNDFlYzA0IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogTmljayBWYXRhbWFu aXVjIDx2YXRhbWFuZUBnbWFpbC5jb20+CitEYXRlOiBTdW4sIDI4IE1heSAyMDIzIDAxOjUwOjQ2 IC0wNDAwCitTdWJqZWN0OiBbUEFUQ0hdIEZpeCBzdGFjayBvdmVyZmxvdyBpbiBDVkUtMjAyMy0z MTkyMgorCitpc0FycmF5IGFuZCBwcm94eSBpc0FycmF5IGNhbiBjYWxsIGVhY2ggb3RoZXIgaW5k ZWZpbml0ZWx5IGluIGEgbXV0dWFsbHkKK3JlY3Vyc2l2ZSBsb29wLgorCitBZGQgYSBzdGFjayBv dmVyZmxvdyBjaGVjayBpbiB0aGUganNfcHJveHlfaXNBcnJheSBmdW5jdGlvbiBiZWZvcmUgY2Fs bGluZworSlNfaXNBcnJheShjdHgsIHMtPnRhcmdldCkuCisKK1dpdGggQVNBTiB0aGUgdGhlIHBv Yy5qcyBmcm9tIGlzc3VlIDE3ODoKKworYGBgCisuL3FqcyAuL3BvYy5qcworSW50ZXJuYWxFcnJv cjogc3RhY2sgb3ZlcmZsb3cKKyAgYXQgaXNBcnJheSAobmF0aXZlKQorICBhdCA8ZXZhbD4gKC4v cG9jLmpzOjQpCitgYGAKKworRml4OiBodHRwczovL2dpdGh1Yi5jb20vYmVsbGFyZC9xdWlja2pz L2lzc3Vlcy8xNzgKKy0tLQorIHF1aWNranMuYyB8IDYgKysrKysrCisgMSBmaWxlIGNoYW5nZWQs IDYgaW5zZXJ0aW9ucygrKQorCitkaWZmIC0tZ2l0IGEvcXVpY2tqcy5jIGIvcXVpY2tqcy5jCitp bmRleCA3OTE2MDEzOS4uYTNiMGI1NWYgMTAwNjQ0CistLS0gYS9xdWlja2pzLmMKKysrKyBiL3F1 aWNranMuYworQEAgLTQ1MjQzLDYgKzQ1MjQzLDEyIEBAIHN0YXRpYyBpbnQganNfcHJveHlfaXNB cnJheShKU0NvbnRleHQgKmN0eCwgSlNWYWx1ZUNvbnN0IG9iaikKKyAgICAgSlNQcm94eURhdGEg KnMgPSBKU19HZXRPcGFxdWUob2JqLCBKU19DTEFTU19QUk9YWSk7CisgICAgIGlmICghcykKKyAg ICAgICAgIHJldHVybiBGQUxTRTsKKysKKysgICAgaWYgKGpzX2NoZWNrX3N0YWNrX292ZXJmbG93 KGN0eC0+cnQsIDApKSB7CisrICAgICAgICBKU19UaHJvd1N0YWNrT3ZlcmZsb3coY3R4KTsKKysg ICAgICAgIHJldHVybiAtMTsKKysgICAgfQorKworICAgICBpZiAocy0+aXNfcmV2b2tlZCkgewor ICAgICAgICAgSlNfVGhyb3dUeXBlRXJyb3JSZXZva2VkUHJveHkoY3R4KTsKKyAgICAgICAgIHJl dHVybiAtMTsK --===============0930195050425639520==--