From f68db0e928718ac09ab6d5905ada40b7a5bc80c8 Mon Sep 17 00:00:00 2001
From: Fabrice Bellard <fabrice@bellard.org>
Date: Sat, 7 Nov 2026 11:01:37 +0100
Subject: [PATCH] Check for NULL object references in deserializer (bnoordhuis)

---
 quickjs.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/quickjs.c b/quickjs.c
index 4860a45..40f2d6e 100644
--- a/quickjs.c
+++ b/quickjs.c
@@ -40573,7 +40573,7 @@ static JSValue JS_ReadObjectRec(BCReaderState *s)
             if (bc_get_leb128(s, &val))
                 return JS_EXCEPTION;
             bc_read_trace(s, "%u\n", val);
-            if (val >= s->objects_count) {
+            if (val >= s->objects_count || !s->objects[val]) {
                 return JS_ThrowSyntaxError(ctx, "invalid object reference (%u >= %u)",
                                            val, s->objects_count);
             }
-- 
2.47.3