github_mirrors/quickjs
3
0
Fork 1
mirror of https://github.com/bellard/quickjs.git synced 2025-11-15 10:12:14 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix length check in ArrayBuffer.prototype.slice (bnoordhuis) (#451)

Browse Source
This commit is contained in:
Fabrice Bellard
2025-11-03 18:38:20 +01:00
parent 7cfddd0664
commit c6fe5a98fd
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
quickjs.c
View File

@@ -55626,7 +55626,7 @@ static JSValue js_array_buffer_slice(JSContext *ctx,
goto fail;
}
/* must test again because of side effects */
if (abuf->detached) {
if (abuf->detached || abuf->byte_length < start + new_len) {
JS_ThrowTypeErrorDetachedArrayBuffer(ctx);
goto fail;
}