This PR fixes a heap buffer overflow in `lean_io_prim_handle_read` that was triggered through an integer overflow in the size computation of an allocation. In addition it places several checked arithmetic operations on all relevant allocation paths to have potential future overflows be turned into crashes instead. The offending code now throws an out of memory error instead. Closes: #13388 |
||
|---|---|---|
| .. | ||
| lean.h | ||
| lean_gmp.h | ||
| lean_libuv.h | ||