]> git.kaiwu.me - njs.git/commitdiff
Limiting recursion depth while compiling.
authorDmitry Volyntsev <xeioex@nginx.com>
Fri, 23 Aug 2019 12:13:45 +0000 (15:13 +0300)
committerDmitry Volyntsev <xeioex@nginx.com>
Fri, 23 Aug 2019 12:13:45 +0000 (15:13 +0300)
This closes #146 issue on Github.

src/njs_generator.c
src/njs_generator.h
src/njs_parser.c
src/njs_parser.h
src/njs_parser_expression.c

index 11bbcf0fb799becf3474d8c30dfaaa54a1ec01c1..dbefd02c57b7a16abe432936bd016c4e6bdfa110 100644 (file)
@@ -257,7 +257,7 @@ static const njs_str_t  undef_label  = { 0xffffffff, (u_char *) "" };
 
 
 static njs_int_t
-njs_generator(njs_vm_t *vm, njs_generator_t *generator, njs_parser_node_t *node)
+njs_generate(njs_vm_t *vm, njs_generator_t *generator, njs_parser_node_t *node)
 {
     if (node == NULL) {
         return NJS_OK;
@@ -508,6 +508,24 @@ njs_generator(njs_vm_t *vm, njs_generator_t *generator, njs_parser_node_t *node)
 }
 
 
+njs_inline njs_int_t
+njs_generator(njs_vm_t *vm, njs_generator_t *generator, njs_parser_node_t *node)
+{
+    njs_int_t  ret;
+
+    if (njs_slow_path(generator->count++ > 1024)) {
+        njs_range_error(vm, "Maximum call stack size exceeded");
+        return NJS_ERROR;
+    }
+
+    ret = njs_generate(vm, generator, node);
+
+    generator->count--;
+
+    return ret;
+}
+
+
 static u_char *
 njs_generate_reserve(njs_vm_t *vm, njs_generator_t *generator, size_t size)
 {
index 51128d7a1b06fa4c12aa260232ad354104c320a1..043a9e8ff8f6c55ac854eaad9e50935305775d35 100644 (file)
@@ -24,6 +24,8 @@ struct njs_generator_s {
 
     /* Parsing Function() or eval(). */
     uint8_t                         runtime;           /* 1 bit */
+
+    njs_uint_t                      count;
 };
 
 
index ff8e20d000ac09ee91162c39fd9ecd83c979ebe9..02444e0e2ea9f44acf10435140d52197bd5d61cd 100644 (file)
@@ -127,6 +127,11 @@ njs_parser(njs_vm_t *vm, njs_parser_t *parser, njs_parser_t *prev)
 
     node->token = NJS_TOKEN_END;
 
+    if (njs_slow_path(parser->count != 0)) {
+        njs_internal_error(vm, "parser->count != 0");
+        return NJS_ERROR;
+    }
+
     return NJS_OK;
 }
 
@@ -249,7 +254,12 @@ njs_parser_statement_chain(njs_vm_t *vm, njs_parser_t *parser,
 
     last = *child;
 
+    njs_parser_enter(vm, parser);
+
     token = njs_parser_statement(vm, parser, token);
+
+    njs_parser_leave(parser);
+
     if (njs_slow_path(token <= NJS_TOKEN_ILLEGAL)) {
         return njs_parser_unexpected_token(vm, parser, token);
     }
index a0bcd0276d7a29976b4e0ecb625edc7a80990b66..cf4062d7a1518e884b3e0540878aa22ac3786f0c 100644 (file)
@@ -73,6 +73,7 @@ struct njs_parser_s {
     njs_lexer_t                     *lexer;
     njs_parser_node_t               *node;
     njs_parser_scope_t              *scope;
+    njs_uint_t                      count;
 };
 
 
@@ -113,6 +114,18 @@ void njs_parser_node_error(njs_vm_t *vm, njs_parser_node_t *node,
     njs_value_type_t type, const char *fmt, ...);
 
 
+#define njs_parser_enter(vm, parser)                                          \
+    do {                                                                      \
+        if (njs_slow_path((parser)->count++ > 1024)) {                        \
+            njs_range_error(vm, "Maximum call stack size exceeded");          \
+            return NJS_TOKEN_ERROR;                                           \
+        }                                                                     \
+    } while (0)
+
+
+#define njs_parser_leave(parser) ((parser)->count--)
+
+
 #define njs_parser_is_lvalue(node)                                            \
     ((node)->token == NJS_TOKEN_NAME || (node)->token == NJS_TOKEN_PROPERTY)
 
index 52851758f74ed4ca552afa56b34aa6f394b2f9fd..e46a81f9144a979d2ea4e2b7cfa67032a8945a1b 100644 (file)
@@ -744,7 +744,11 @@ njs_parser_call_expression(njs_vm_t *vm, njs_parser_t *parser,
         token = njs_parser_new_expression(vm, parser, token);
 
     } else {
+        njs_parser_enter(vm, parser);
+
         token = njs_parser_terminal(vm, parser, token);
+
+        njs_parser_leave(parser);
     }
 
     if (njs_slow_path(token <= NJS_TOKEN_ILLEGAL)) {
@@ -761,7 +765,12 @@ njs_parser_call_expression(njs_vm_t *vm, njs_parser_t *parser,
             return token;
         }
 
+        njs_parser_enter(vm, parser);
+
         token = njs_parser_call(vm, parser, token, 0);
+
+        njs_parser_leave(parser);
+
         if (njs_slow_path(token <= NJS_TOKEN_ILLEGAL)) {
             return token;
         }
@@ -863,7 +872,12 @@ njs_parser_new_expression(njs_vm_t *vm, njs_parser_t *parser,
         token = njs_parser_new_expression(vm, parser, token);
 
     } else {
+        njs_parser_enter(vm, parser);
+
         token = njs_parser_terminal(vm, parser, token);
+
+        njs_parser_leave(parser);
+
         if (njs_slow_path(token <= NJS_TOKEN_ILLEGAL)) {
             return token;
         }