From 59dc82ae1afdd2cd7bf4f23b458123c3214aa831 Mon Sep 17 00:00:00 2001
From: tadf <tadf@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>
Date: Thu, 10 Apr 2003 09:48:15 +0000
Subject: added some checks for request size.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@3665 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
---
 array.c | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'array.c')

diff --git a/array.c b/array.c
index 74bf094f51..cecf4278f1 100644
--- a/array.c
+++ b/array.c
@@ -1529,9 +1529,13 @@ rb_ary_times(ary, times)
     }
 
     len = NUM2LONG(times);
+    if (len == 0) return rb_ary_new2(0);
     if (len < 0) {
 	rb_raise(rb_eArgError, "negative argument");
     }
+    if (LONG_MAX/len < RARRAY(ary)->len) {
+	rb_raise(rb_eArgError, "argument too big");
+    }
     len *= RARRAY(ary)->len;
 
     ary2 = ary_new(rb_obj_class(ary), len);
-- 
cgit v1.2.3