Check for NULL object references in deserializer (bnoordhuis)

diff --git a/quickjs.c b/quickjs.c
index 4860a45da2dbff1f512dd0ec0dd805fb9a40bb27..40f2d6e47f3b7085a23148a7f9c3b61fda66890e 100644 (file)
--- a/quickjs.c
+++ b/quickjs.c
@@ -40573,7 +40573,7 @@ static JSValue JS_ReadObjectRec(BCReaderState *s)
             if (bc_get_leb128(s, &val))
                 return JS_EXCEPTION;
             bc_read_trace(s, "%u\n", val);
-            if (val >= s->objects_count) {
+            if (val >= s->objects_count || !s->objects[val]) {
                 return JS_ThrowSyntaxError(ctx, "invalid object reference (%u >= %u)",
                                            val, s->objects_count);
             }