Bug #22086: Backport Marshal overflow fix

• Status: Closed
• Assignee: -
• Target version: -
• Backport: 3.3: WONTFIX, 3.4: DONE, 4.0: DONE

[nobu (Nobuyoshi Nakada)]

GH-17130

• 8ed456afc95ccb23256fe10036cd0d9678ceb245
  Marshal.load: Fix buffer overflow at overread
• 2510dfee2a6aba9e99664b453e2be69e00eb21a6
  Marshal.load: Fix integer overflow of length
• 3f6d6c0373d2cb005f7cf164414cbb531f42d525
  Marshal.load: Check bignum sign

[hsbt (Hiroshi SHIBATA)]

• Backport changed from 3.3: REQUIRED, 3.4: REQUIRED, 4.0: REQUIRED to 3.3: WONTFIX, 3.4: REQUIRED, 4.0: REQUIRED

[nagachika (Tomoyuki Chikanaga)]

• Backport changed from 3.3: WONTFIX, 3.4: REQUIRED, 4.0: REQUIRED to 3.3: WONTFIX, 3.4: DONE, 4.0: REQUIRED

backported into ruby_3_4 at:
513c0835f72d53e21016742ca098d0b0f9792f15
00e51cf79c1770dd4505658ce9affd69d5699fa9
6de25456a2f245053a1cd0c1cac8699dcb261721

[k0kubun (Takashi Kokubun)]

• Backport changed from 3.3: WONTFIX, 3.4: DONE, 4.0: REQUIRED to 3.3: WONTFIX, 3.4: DONE, 4.0: DONE

ruby_4_0 637f3a997e3094d3ab7869a3760812526628c2dc merged revision(s) 8ed456afc95ccb23256fe10036cd0d9678ceb245, 2510dfee2a6aba9e99664b453e2be69e00eb21a6, 3f6d6c0373d2cb005f7cf164414cbb531f42d525 via https://github.com/ruby/ruby/pull/17771.