Skip to content

Add a ratchet for expect("int cast") sites and clear json5, image codecs and elf #38936

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
robobun wants to merge 9 commits into
base: main
Choose a base branch
from
Open

Add a ratchet for expect("int cast") sites and clear json5, image codecs and elf #38936

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
c524fed
Add a per-file ratchet for expect("int cast") sites and clear json5, …
robobun Aug 15, 2026
cc3327f
test: mirror the runtime's Nix host check when gating the PT_INTERP r…
robobun Aug 15, 2026
84a007e
Shorten the comments on the new helpers
robobun Aug 15, 2026
154526f
Collapse the remaining helper comments to one line
robobun Aug 15, 2026
6e74012
test: share hostLooksNix and readElfInterp through the harness
robobun Aug 15, 2026
cf19105
elf: propagate unreadable template headers out of the interpreter rew…
robobun Aug 15, 2026
dec551b
source-lints: make the int cast inventory a ceiling and share the fil…
robobun Aug 15, 2026
62e21f3
image: store the last size as Option<(u32, u32)>; macho: keep the __b…
robobun Aug 15, 2026
c56508c
image: one-line doc comment on last_size
robobun Aug 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
394 changes: 181 additions & 213 deletions src/exe_format/elf.rs
View file
Open in desktop

Large diffs are not rendered by default.

86 changes: 34 additions & 52 deletions src/parsers/json5.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ use bun_core::StackCheck;
// `is_identifier_start/_part` landed in `bun_core::lexer`; route through there.
use bun_alloc::{ArenaVec as BumpVec, ArenaVecExt as _};
use bun_ast::{E, Expr, G};
use bun_ast::{Loc, Log, Source};
use bun_ast::{Loc, Log, Source, usize2loc};
use bun_core::lexer as identifier;
use bun_core::strings;

Expand Down Expand Up @@ -92,6 +92,7 @@ pub enum ParseError {
ExpectedClosingBracket,
InvalidIdentifier,
TrailingData,
DocumentTooLarge,
StackOverflow,
}

Expand Down Expand Up @@ -123,6 +124,7 @@ pub enum Error {
ExpectedClosingBracket { pos: usize },
InvalidIdentifier { pos: usize },
TrailingData { pos: usize },
DocumentTooLarge,
}

#[derive(Copy, Clone, PartialEq, Eq, strum::IntoStaticStr, Debug)]
Expand Down Expand Up @@ -165,9 +167,8 @@ impl Error {
| Error::ExpectedClosingBrace { pos }
| Error::ExpectedClosingBracket { pos }
| Error::InvalidIdentifier { pos }
| Error::TrailingData { pos } => Loc {
start: i32::try_from(pos).expect("int cast"),
},
| Error::TrailingData { pos } => usize2loc(pos),
Error::DocumentTooLarge => Loc { start: 0 },
};
let msg: &'static [u8] = match *self {
Error::Oom | Error::StackOverflow => unreachable!(),
Expand All @@ -191,6 +192,7 @@ impl Error {
Error::ExpectedClosingBracket { .. } => b"Expected ']'",
Error::InvalidIdentifier { .. } => b"Invalid identifier start character",
Error::TrailingData { .. } => b"Unexpected token after JSON5 value",
Error::DocumentTooLarge => b"JSON5 document is too large to parse (2 GiB maximum)",
};
log.add_error(Some(source), loc, msg);
Ok(())
Expand Down Expand Up @@ -222,6 +224,7 @@ impl<'a> JSON5Parser<'a> {
match err {
ParseError::OutOfMemory => Error::Oom,
ParseError::StackOverflow => Error::StackOverflow,
ParseError::DocumentTooLarge => Error::DocumentTooLarge,
// Scanner errors use scan position
ParseError::UnexpectedCharacter => Error::UnexpectedCharacter { pos: scan_pos },
ParseError::UnterminatedString => Error::UnterminatedString { pos: scan_pos },
Expand Down Expand Up @@ -288,13 +291,17 @@ impl<'a> JSON5Parser<'a> {
0
}

/// Records the current position as the start of the token being scanned.
/// `parse_root` rejects documents whose positions do not fit a `Loc`.
Comment thread
robobun marked this conversation as resolved.
Outdated
fn start_token(&mut self) {
self.token.loc = usize2loc(self.pos);
}

fn scan(&mut self) -> Result<(), ParseError> {
self.token.data = 'next: loop {
match self.peek() {
0 => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
break 'next TokenData::Eof;
}
// Whitespace — skip without setting loc
Expand All @@ -304,73 +311,53 @@ impl<'a> JSON5Parser<'a> {
}
// Structural
b'{' => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
self.pos += 1;
break 'next TokenData::LeftBrace;
}
b'}' => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
self.pos += 1;
break 'next TokenData::RightBrace;
}
b'[' => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
self.pos += 1;
break 'next TokenData::LeftBracket;
}
b']' => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
self.pos += 1;
break 'next TokenData::RightBracket;
}
b':' => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
self.pos += 1;
break 'next TokenData::Colon;
}
b',' => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
self.pos += 1;
break 'next TokenData::Comma;
}
b'+' => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
self.pos += 1;
break 'next TokenData::Number(self.scan_signed_value(false)?);
}
b'-' => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
self.pos += 1;
break 'next TokenData::Number(self.scan_signed_value(true)?);
}
// Strings
b'"' | b'\'' => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
break 'next TokenData::String(self.scan_string()?);
}
// Numbers
b'0'..=b'9' | b'.' => {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
break 'next TokenData::Number(self.scan_number()?);
}
// Comments — skip without setting loc
Expand All @@ -393,27 +380,21 @@ impl<'a> JSON5Parser<'a> {
}
c => {
if c == b't' {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
break 'next if self.scan_keyword(b"true") {
TokenData::Boolean(true)
} else {
TokenData::Identifier(self.scan_identifier()?)
};
} else if c == b'f' {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
break 'next if self.scan_keyword(b"false") {
TokenData::Boolean(false)
} else {
TokenData::Identifier(self.scan_identifier()?)
};
} else if c == b'n' {
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
break 'next if self.scan_keyword(b"null") {
TokenData::Null
} else {
Expand All @@ -425,9 +406,7 @@ impl<'a> JSON5Parser<'a> {
|| c == b'$'
|| c == b'\\'
{
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
break 'next TokenData::Identifier(self.scan_identifier()?);
} else if c >= 0x80 {
// Multi-byte: check whitespace first, then identifier
Expand All @@ -436,9 +415,7 @@ impl<'a> JSON5Parser<'a> {
self.pos += usize::from(mb);
continue 'next;
}
self.token.loc = Loc {
start: i32::try_from(self.pos).expect("int cast"),
};
self.start_token();
let Some(cp) = self.read_codepoint() else {
return Err(ParseError::UnexpectedCharacter);
};
Expand Down Expand Up @@ -505,6 +482,11 @@ impl<'a> JSON5Parser<'a> {
// ── Parser ──

fn parse_root(&mut self) -> Result<Expr, ParseError> {
// Token and error positions are `i32` `Loc`s, including the EOF token
// at `source.len()`.
Comment thread
robobun marked this conversation as resolved.
Outdated
if self.source.len() > i32::MAX as usize {
return Err(ParseError::DocumentTooLarge);
}
self.scan()?;
let result = self.parse_value()?;
if !matches!(self.token.data, TokenData::Eof) {
Expand Down
4 changes: 2 additions & 2 deletions src/runtime/image/Image.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1945,7 +1945,7 @@ impl PipelineTask {
fn apply_pipeline(&self, d: &mut codecs::Decoded) -> Result<(), codecs::Error> {
let p = &self.pipeline;
if p.rotate != 0 {
let next = codecs::rotate(&d.rgba, d.width, d.height, u32::from(p.rotate))?;
let next = codecs::rotate(&d.rgba, d.width, d.height, p.rotate)?;
// Assignment drops
// the old `Vec<u8>`/owned buffer.
d.rgba = next.rgba;
Expand Down Expand Up @@ -2071,7 +2071,7 @@ fn apply_orientation(
if t.rotate != 0 {
// Swap pixel slots only — `next` carries no ICC profile, and the
// one on `d` (set by decode) must survive EXIF auto-orient.
let next = codecs::rotate(&d.rgba, d.width, d.height, u32::from(t.rotate))?;
let next = codecs::rotate(&d.rgba, d.width, d.height, t.rotate)?;
d.rgba = next.rgba;
d.width = next.width;
d.height = next.height;
Expand Down
Loading
Loading