Skip to content

max_uint32 substitution is the minimal patch for an introduced fix to…#1468

Merged
saghul merged 9 commits into
quickjs-ng:masterfrom
jwalker:fix/max_int_to_max_uint32
May 13, 2026
Merged

max_uint32 substitution is the minimal patch for an introduced fix to…#1468
saghul merged 9 commits into
quickjs-ng:masterfrom
jwalker:fix/max_int_to_max_uint32

Conversation

@jwalker
Copy link
Copy Markdown
Contributor

@jwalker jwalker commented May 12, 2026

  • bug introduced by 40e197f
  • Address GHSA-mc32-gh5c-8v82

Long term solution is the slow-array conversion is the semantically correct fix for supporting arrays with more than 2^31 elements.

@jwalker
Copy link
Copy Markdown
Contributor Author

jwalker commented May 12, 2026

The failed tests, OOM is expected from the poc testcase since the OOB path is now guarded. Happy to add a simple check try/except catch in the poc if required for passing all checks

@saghul
Copy link
Copy Markdown
Contributor

saghul commented May 12, 2026

Yeah the CI should have a test that passes...

Comment thread quickjs.c Outdated
Comment thread tests/expand_fast_array_maxint_poc.js Outdated
@jwalker
Copy link
Copy Markdown
Contributor Author

jwalker commented May 13, 2026

All checks passed and suggestions added.

@saghul saghul merged commit a653771 into quickjs-ng:master May 13, 2026
124 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants