Skip to content

Conversation

@NiceAndPeter
Copy link
Owner

Fixed 3 CRITICAL and 4 HIGH priority undefined behavior issues:

CRITICAL FIXES:

  1. ltable.cpp:1243 - Added bounds check for bit mask shift (prevent UB when n >= 32)
  2. ltable.cpp:730 - Split shift validation into separate checks (prevent shift UB)
  3. ltable.cpp:1250 - Added wrap-around assertion for hash table doubling

HIGH PRIORITY FIXES:
4. ltable.cpp:707-708 - Added bounds validation for table array reallocation pointer arithmetic
5. lvm_string.cpp:73-74 - Fixed GC safety in string concatenation (recapture stack pointer after GC)
6. lstack.h:118-125 - Eliminated char* round-trip in stack save/restore (direct pointer arithmetic)
7. ltable.cpp:105-136 - Added overflow checks and alignment assertions for NodeArray memory layout

ADDITIONAL CHANGES:

  • Added include for uintptr_t type
  • All assertions verify safety invariants at runtime

TESTING:

  • All 30+ test files pass: "final OK !!!"
  • Performance: 4.36s average (4.14s-4.59s range)
  • Target: ≤4.33s (within normal variance)

Status: Phase 116 complete, 7/11 critical+high issues fixed

Fixed 3 CRITICAL and 4 HIGH priority undefined behavior issues:

CRITICAL FIXES:
1. ltable.cpp:1243 - Added bounds check for bit mask shift (prevent UB when n >= 32)
2. ltable.cpp:730 - Split shift validation into separate checks (prevent shift UB)
3. ltable.cpp:1250 - Added wrap-around assertion for hash table doubling

HIGH PRIORITY FIXES:
4. ltable.cpp:707-708 - Added bounds validation for table array reallocation pointer arithmetic
5. lvm_string.cpp:73-74 - Fixed GC safety in string concatenation (recapture stack pointer after GC)
6. lstack.h:118-125 - Eliminated char* round-trip in stack save/restore (direct pointer arithmetic)
7. ltable.cpp:105-136 - Added overflow checks and alignment assertions for NodeArray memory layout

ADDITIONAL CHANGES:
- Added <cstdint> include for uintptr_t type
- All assertions verify safety invariants at runtime

TESTING:
- All 30+ test files pass: "final OK !!!"
- Performance: 4.36s average (4.14s-4.59s range)
- Target: ≤4.33s (within normal variance)

Status: Phase 116 complete, 7/11 critical+high issues fixed
@NiceAndPeter NiceAndPeter merged commit bf12327 into main Nov 21, 2025
11 of 19 checks passed
@NiceAndPeter NiceAndPeter deleted the claude/fix-undefined-behavior-01RuvV1fXWBusfXEWPnFd1jy branch November 21, 2025 21:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants