aboutsummaryrefslogtreecommitdiff
path: root/dev
diff options
context:
space:
mode:
authorPierre-Marie Pédrot2021-03-30 14:05:08 +0200
committerPierre-Marie Pédrot2021-03-30 14:05:08 +0200
commit666a3aa8dd7df6dd29ea7944482510048a8a7ba7 (patch)
treebf1558b91b62f14b122aa4fa09d2d56f476b9205 /dev
parentf0c6a1de3eef85ab0787be7e87cb8509e8df43d5 (diff)
parent7ff8b12c14867e43d54c3d4c8976a6179250893d (diff)
Merge PR #14005: Support OCaml primitives with an actual arity larger than 4.
Reviewed-by: ppedrot
Diffstat (limited to 'dev')
-rw-r--r--dev/doc/critical-bugs10
1 files changed, 10 insertions, 0 deletions
diff --git a/dev/doc/critical-bugs b/dev/doc/critical-bugs
index 4452baf513..5c8b8944a7 100644
--- a/dev/doc/critical-bugs
+++ b/dev/doc/critical-bugs
@@ -344,6 +344,16 @@ Conversion machines
noticeable if activated by chance, since it usually breaks
control-flow integrity
+ component: "virtual machine" (compilation to bytecode ran by a C-interpreter)
+ summary: arbitrary code execution on irreducible PArray.set
+ introduced: 8.13
+ impacted released versions: 8.13.0, 8.13.1
+ impacted coqchk versions: none (no virtual machine in coqchk)
+ fixed in: 8.13.2
+ found by: Melquiond
+ GH issue number: #13998
+ risk: none, unless using primitive array operations; systematic otherwise
+
Side-effects
component: side-effects