修复数组类型判定

xiyoo0812 · Oct 8, 2023 · 1527fea · 1527fea
1 parent 41d1fea
commit 1527fea
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 0 deletions.
diff --git a/extend/lbson/src/bson.h b/extend/lbson/src/bson.h
@@ -205,6 +205,10 @@ namespace lbson {
                 if (!lua_isinteger(L, -2)) {
                     return bson_type::BSON_DOCUMENT;
                 }
+                size_t key = lua_tointeger(L, -2);
+                if (key <= 0 || key > raw_len) {
+                    return bson_type::BSON_DOCUMENT;
+                }
                 cur_len++;
                 lua_pop(L, 1);
             }

diff --git a/extend/ljson/src/ljson.h b/extend/ljson/src/ljson.h
@@ -62,6 +62,10 @@ namespace ljson {
                 if (!lua_isinteger(L, -2)) {
                     return false;
                 }
+                size_t key = lua_tointeger(L, -2);
+                if (key <= 0 || key > raw_len) {
+                    return false;
+                }
                 lua_pop(L, 1);
                 cur_len++;
             }

diff --git a/extend/luakit/include/lua_codec.h b/extend/luakit/include/lua_codec.h
@@ -56,6 +56,10 @@ namespace luakit {
             if (!lua_isinteger(L, -2)) {
                 return false;
             }
+            size_t key = lua_tointeger(L, -2);
+            if (key <= 0 || key > raw_len) {
+                return false;
+            }
             cur_len++;
             lua_pop(L, 1);
         }