From: Fabrice Bellard <fabrice@bellard.org>
Date: Sat, 7 Nov 2026 10:01:37 +0000 (+0100)
Subject: Check for NULL object references in deserializer (bnoordhuis)
X-Git-Url: https://git.kaiwu.me/?a=commitdiff_plain;h=f68db0e928718ac09ab6d5905ada40b7a5bc80c8;p=quickjs.git

Check for NULL object references in deserializer (bnoordhuis)
---

diff --git a/quickjs.c b/quickjs.c
index 4860a45..40f2d6e 100644
--- a/quickjs.c
+++ b/quickjs.c
@@ -40573,7 +40573,7 @@ static JSValue JS_ReadObjectRec(BCReaderState *s)
             if (bc_get_leb128(s, &val))
                 return JS_EXCEPTION;
             bc_read_trace(s, "%u\n", val);
-            if (val >= s->objects_count) {
+            if (val >= s->objects_count || !s->objects[val]) {
                 return JS_ThrowSyntaxError(ctx, "invalid object reference (%u >= %u)",
                                            val, s->objects_count);
             }