From: Vsevolod Stakhov <vsevolod@highsecure.ru>
Date: Sat, 25 Jan 2020 16:09:31 +0000 (+0000)
Subject: [Minor] Lua_text: Sanitize span length
X-Git-Tag: 2.3~47
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=01dd389504620aaea909f2c8f2ec8e753e657bd8;p=rspamd.git

[Minor] Lua_text: Sanitize span length
---

diff --git a/src/lua/lua_text.c b/src/lua/lua_text.c
index de8fa9b93..307b2823f 100644
--- a/src/lua/lua_text.c
+++ b/src/lua/lua_text.c
@@ -460,7 +460,8 @@ lua_text_span (lua_State *L)
 		if (len == -1) {
 			len = t->len - (start - 1);
 		}
-		else if (len > (t->len - (start - 1))) {
+
+		if (len < 0 || (len > (t->len - (start - 1)))) {
 			return luaL_error (L, "invalid length");
 		}