DrSocalkwe3n/luajit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Prevent recording of loops with -0 step or NaN values.

Browse Source 
Thanks to Sergey Kaplun. #1432 #1433
This commit is contained in:
Mike Pall
2026-02-11 23:14:13 +01:00
parent ab834de8b6
commit 54cce2e171
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/lj_record.c
View File

@@ -526,6 +526,12 @@ static LoopEvent rec_for(jit_State *J, const BCIns *fori, int isforl)
LoopEvent ev; LoopEvent ev;
TRef stop; TRef stop;
IRType t; IRType t;
/* Avoid semantic mismatches and always failing guards. */
if (tvisnan(&tv[FORL_IDX]) ||
tvisnan(&tv[FORL_STOP]) ||
tvisnan(&tv[FORL_STEP]) ||
tvismzero(&tv[FORL_STEP]))
lj_trace_err(J, LJ_TRERR_GFAIL);
if (isforl) { /* Handle FORL/JFORL opcodes. */ if (isforl) { /* Handle FORL/JFORL opcodes. */
TRef idx = tr[FORL_IDX]; TRef idx = tr[FORL_IDX];
if (mref(J->scev.pc, const BCIns) == fori && tref_ref(idx) == J->scev.idx) { if (mref(J->scev.pc, const BCIns) == fori && tref_ref(idx) == J->scev.idx) {