rdiscount 2.2.7.3 → 2.2.7.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1caa0d04b22615c5a7d74768bd60aea41afff91406b0557831180b8b08a25842
-  data.tar.gz: 3d02b3120eda58da3b54dc162004d6a3ab14b56bd657796026d59931d9cb4088
+  metadata.gz: 0a482c6d06757896511681393e99f986552e02fd6735e55cf0f665a6543a058e
+  data.tar.gz: adc56e6fd1359cdfdd955f2262ecc18376c0d6a822d0476a713fe3cccb468991
 SHA512:
-  metadata.gz: 11053a0e075ba81143cd3cce86f5ccf55d2769600b987734da2c42db817b539fd9ed444c3219fe4c9bfd7998abda905a78cd27b5404a68dc9afec58218062cdc
-  data.tar.gz: 224c5b32b0dceeedff8e435d8467f331a1e14e210268464e3ee2ca5af658c17a2bd102661dd1895e48f1fea429eb97ab00142df72c2fbdfcad87b951d4def3b3
+  metadata.gz: 8d244073c29884550875767cedbb065b760d1d690e51558f67429fe3516665e2ab5758298d3aaed68f5e1242c7a116afa00578cf7d89d067ab681eb3a08d1472
+  data.tar.gz: c2e1999790db93a98d6a5d65ea3f9a8ff1010e49fc678f5baba006f0af61f24123f05bfecc08649dbd13bdbe58198da855d9584bf0c42bd1b5b5217422c4a92e

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 # RDiscount Changelog
 
+## Version 2.2.7.4 <small>(April 1, 2026)</small>
+
+* Fix crash if `to_html` called on a string longer than INT_MAX (2 GiB of text).
+
 ## Version 2.2.7.3 <small>(December 31, 2023)</small>
 
 * Add Ruby 3.2 and 3.3 to continuous integration

data/Rakefile

@@ -138,7 +138,7 @@ task :gather => 'discount/markdown.h' do |t|
   ]
   
   # Ensure configure.sh was run
-  if not File.exists? 'discount/mkdio.h'
+  if not File.exist? 'discount/mkdio.h'
     abort "discount/mkdio.h not found. Did you run ./configure.sh in the discount directory?"
   end
   
@@ -225,7 +225,11 @@ file 'rdiscount.gemspec' => FileList['Rakefile','lib/rdiscount.rb'] do |f|
   files = `git ls-files`.
     split("\n").
     sort.
-    reject{ |file| file =~ /^\./ || file =~ /^test\/MarkdownTest/ }.
+    reject{|file| 
+      file =~ /^\./ || 
+      file =~ /^test\/MarkdownTest/ || 
+      file =~ /^CLAUDE\.md|ext\.diff$/
+    }.
     map{ |file| "    #{file}" }.
     join("\n")
   # piece file back together and write...

data/ext/rdiscount.c

@@ -1,4 +1,5 @@
 #include <stdio.h>
+#include <limits.h>
 #include <locale.h>
 #include "ruby.h"
 #include "mkdio.h"
@@ -43,6 +44,18 @@ static AccessorFlagPair ACCESSOR_2_FLAG[] = {
 
 static VALUE rb_cRDiscount;
 
+static int
+rb_rdiscount__text_len(VALUE text)
+{
+    long text_len = RSTRING_LEN(text);
+
+    if (text_len > INT_MAX) {
+        rb_raise(rb_eArgError, "markdown input too large");
+    }
+
+    return (int)text_len;
+}
+
 int rb_rdiscount__get_flags(VALUE ruby_obj)
 {
     AccessorFlagPair *entry;
@@ -78,8 +91,10 @@ rb_rdiscount_to_html(int argc, VALUE *argv, VALUE self)
     int szres;
     VALUE encoding;
     VALUE text = rb_funcall(self, rb_intern("text"), 0);
-    VALUE buf = rb_str_buf_new(1024);
     Check_Type(text, T_STRING);
+    int text_len = rb_rdiscount__text_len(text);  // may rb_raise
+    
+    VALUE buf = rb_str_buf_new(1024);
 
     int flags = rb_rdiscount__get_flags(self);
     
@@ -94,7 +109,7 @@ rb_rdiscount_to_html(int argc, VALUE *argv, VALUE self)
     char *old_locale = strdup(setlocale(LC_CTYPE, NULL));
     setlocale(LC_CTYPE, "C");   /* ASCII (and passthru characters > 127) */
 
-    MMIOT *doc = mkd_string(RSTRING_PTR(text), RSTRING_LEN(text), flags);
+    MMIOT *doc = mkd_string(RSTRING_PTR(text), text_len, flags);
 
     if ( mkd_compile(doc, flags) ) {
         szres = mkd_document(doc, &res);
@@ -129,11 +144,12 @@ rb_rdiscount_toc_content(int argc, VALUE *argv, VALUE self)
     /* grab char pointer to markdown input text */
     VALUE text = rb_funcall(self, rb_intern("text"), 0);
     Check_Type(text, T_STRING);
+    int text_len = rb_rdiscount__text_len(text);  // may rb_raise
 
     /* allocate a ruby string buffer and wrap it in a stream */
     VALUE buf = rb_str_buf_new(4096);
 
-    MMIOT *doc = mkd_string(RSTRING_PTR(text), RSTRING_LEN(text), flags);
+    MMIOT *doc = mkd_string(RSTRING_PTR(text), text_len, flags);
 
     if ( mkd_compile(doc, flags) ) {
         szres = mkd_toc(doc, &res);

data/lib/rdiscount.rb

@@ -24,7 +24,7 @@
 #   end
 #
 class RDiscount
-  VERSION = '2.2.7.3'
+  VERSION = '2.2.7.4'
 
   # Original Markdown formatted text.
   attr_reader :text

data/rdiscount.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name = 'rdiscount'
-  s.version = '2.2.7.3'
+  s.version = '2.2.7.4'
   s.summary = "Fast Implementation of Gruber's Markdown in C"
   s.email = 'david@dafoster.net'
   s.homepage = 'http://dafoster.net/projects/rdiscount/'

data/test/rdiscount_test.rb

@@ -21,6 +21,25 @@ class RDiscountTest < Test::Unit::TestCase
     RDiscount.new(text).to_html
   end
 
+  def test_that_oversized_input_raises_argument_error
+    # mkd_string() takes an int length, so inputs > INT_MAX (2 147 483 647 bytes)
+    # must be rejected before reaching C to avoid integer truncation / overflow.
+    int_max = 2_147_483_647  # INT_MAX in C
+    begin
+      oversized_text = 'a' * (int_max + 1)
+    # ArgumentError on TruffleRuby; RangeError on Windows
+    rescue NoMemoryError, ArgumentError, RangeError
+      # `omit` is Test::Unit's native skip; `skip` is Minitest's. Support both.
+      respond_to?(:omit, true) ?
+        omit("Insufficient memory to create oversized input for this test") :
+        skip("Insufficient memory to create oversized input for this test")
+    end
+
+    assert_raise(ArgumentError) do
+      RDiscount.new(oversized_text).to_html
+    end
+  end
+
   def test_that_smart_converts_double_quotes_to_curly_quotes
     rd = RDiscount.new(%("Quoted text"), :smart)
     assert_equal %(<p>&ldquo;Quoted text&rdquo;</p>\n), rd.to_html

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rdiscount
 version: !ruby/object:Gem::Version
-  version: 2.2.7.3
+  version: 2.2.7.4
 platform: ruby
 authors:
 - Ryan Tomayko
@@ -9,12 +9,10 @@ authors:
 - Andrew White
 - David Foster
 - l33tname
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-12-31 00:00:00.000000000 Z
+date: 2026-04-02 00:00:00.000000000 Z
 dependencies: []
-description:
 email: david@dafoster.net
 executables:
 - rdiscount
@@ -80,7 +78,6 @@ homepage: http://dafoster.net/projects/rdiscount/
 licenses:
 - BSD-3-Clause
 metadata: {}
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -95,8 +92,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.3
-signing_key:
+rubygems_version: 3.6.2
 specification_version: 4
 summary: Fast Implementation of Gruber's Markdown in C
 test_files: