merge revision(s) 4e0bb58: [Backport #21811]

k0kubun · k0kubun · commit b170f02e0f2a · 2026-01-12T17:02:01.000-08:00
[PATCH] fix underflow
diff --git a/pack.c b/pack.c
@@ -302,7 +302,7 @@ pack_pack(rb_execution_context_t *ec, VALUE ary, VALUE fmt, VALUE buffer)
         else if (ISDIGIT(*p)) {
             errno = 0;
             len = STRTOUL(p, (char**)&p, 10);
-            if (errno) {
+            if (len < 0 || errno) {
                 rb_raise(rb_eRangeError, "pack length too big");
             }
         }

Original file line number	Diff line number	Diff line change
`@@ -302,7 +302,7 @@ pack_pack(rb_execution_context_t *ec, VALUE ary, VALUE fmt, VALUE buffer)`
`302`	`302`	`else if (ISDIGIT(*p)) {`
`303`	`303`	`errno = 0;`
`304`	`304`	`len = STRTOUL(p, (char**)&p, 10);`
`305`		`- if (errno) {`
	`305`	`+ if (len < 0 \|\| errno) {`
`306`	`306`	`rb_raise(rb_eRangeError, "pack length too big");`
`307`	`307`	`}`
`308`	`308`	`}`