teptris 0.3.0.2 → 0.3.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 16869d7dc17dada9785490a4cc1268a02c36a4926a198b31f692021af453835a
-  data.tar.gz: 53a738130ff1d160c40f6e40fef79d41d4920f5188372ba626a1bf5090a83d74
+  metadata.gz: 63a08d9be8387bccda44fa806c55a762dfd2be0f84d5a1f832c1a9dfea018d67
+  data.tar.gz: c52a5a07c65f99e678d43844efba63f8b50c592837a32217683282cffa8f822d
 SHA512:
-  metadata.gz: 6c1fde58fa36cce4e57af73453ace01e0ddcb82c08f83d9e1d0be3d95038fe2046d5a686f539ab41f451cc7289c10d2376bf5b29452dd2208a877cbd85598cbf
-  data.tar.gz: 45b1747790ff1a16b5d26f688c15b2dd3a9b31d2c9772af0a2f82564ee42548a5647a525383e768295e90fa4a13b6adc90be5701c69c88c253efad575f85094d
+  metadata.gz: d4330fd1cfb9016e174306525fe25f3ce5bbc40661a742a66ececebf591d5783831b0bdfd053d64c289d73aa0ad424d2eeaf5e315553ae72bb4dabe21a2200a1
+  data.tar.gz: 26cb5d188688905fc062b43fd02a1f73d5c1951c6afc4eaee1052da75abdfcd66c5e1597a4022466d2859e01f8f2348387d935ed4303e9787e116e666dc4250f

data/ext/teptris_ext/engine/README.md

@@ -1,4 +1,4 @@
-# libteptris 0.3.0 — vendored source
+# libteptris 0.3.4 — vendored source
 
 This directory carries the COMPLETE C source of the engine this
 gem's extension was built from (the packaging doctrine: compiled

data/ext/teptris_ext/engine/src/include/teptris/plan.h

@@ -11,6 +11,10 @@ extern "C" {
 
 #define TEPTRIS_PLAN_ABI_VERSION 1
 
+/* walk_table recurses per NESTED level; plans deeper than this are
+ * rejected at build (the parser and builder share the 512 ceiling). */
+#define TEPTRIS_PLAN_MAX_DEPTH 512
+
 typedef struct teptris_plan teptris_plan;
 typedef struct teptris_plan_result teptris_plan_result;
 

data/ext/teptris_ext/engine/src/include/teptris/version.h

@@ -4,6 +4,6 @@
 #define TEPTRIS_VERSION_MAJOR 0
 #define TEPTRIS_VERSION_MINOR 3
 #define TEPTRIS_VERSION_PATCH 0
-#define TEPTRIS_VERSION_STRING "0.3.0"
+#define TEPTRIS_VERSION_STRING "0.3.4"
 
 #endif /* TEPTRIS_VERSION_H */

data/ext/teptris_ext/engine/src/teptris/dom/dom.c

@@ -146,8 +146,10 @@ teptris_status teptris_dom_table_insert_slot(teptris_document *doc,
             if (ne == NULL) {
                 return TEPTRIS_ERR_ALLOC;
             }
-            memcpy(ne, t->as.table.entries,
-                   t->as.table.len * sizeof(teptris_entry));
+            if (t->as.table.len > 0) {
+                memcpy(ne, t->as.table.entries,
+                       t->as.table.len * sizeof(teptris_entry));
+            }
             t->as.table.entries = ne;
         }
         t->as.table.cap = ncap;
@@ -181,8 +183,10 @@ teptris_status teptris_dom_array_push(teptris_document *doc, teptris_node *a,
             if (ni == NULL) {
                 return TEPTRIS_ERR_ALLOC;
             }
-            memcpy(ni, a->as.array.items,
-                   a->as.array.len * sizeof(teptris_node *));
+            if (a->as.array.len > 0) {
+                memcpy(ni, a->as.array.items,
+                       a->as.array.len * sizeof(teptris_node *));
+            }
             a->as.array.items = ni;
         }
         a->as.array.cap = ncap;

data/ext/teptris_ext/engine/src/teptris/plan/plan.c

@@ -7,6 +7,7 @@
 #include <string.h>
 
 #include "teptris/dom/dom.h"
+#include <stdio.h>
 #include "teptris/plan.h"
 
 typedef struct plan_row {
@@ -86,6 +87,44 @@ teptris_plan *teptris_plan_build(const teptris_plan_spec *spec,
         p->rows[i].kind = r->kind;
         p->rows[i].sub = r->sub;
     }
+    /* Depth gate (rows are validated above: sub < plan_count). BFS
+     * from the root relaxes depths in one ascending pass — sub-plans
+     * always lay out after their parent. walk_table recurses per
+     * NESTED level, so an unbounded hostile plan would crash the
+     * host's stack; the parser and builder share the 512 ceiling. */
+    /* entries, not bytes — the byte-sized malloc here is the same
+     * overflow the ruby plan_build hit (documented there) */
+    uint32_t *depths = malloc(p->plan_count * sizeof(*depths));
+    if (depths == NULL) {
+        teptris_plan_free(p);
+        *status = TEPTRIS_ERR_ALLOC;
+        return NULL;
+    }
+    memset(depths, 0, p->plan_count * sizeof(*depths));
+    for (uint32_t pi = 0; pi < p->plan_count; pi++) {
+        uint32_t lo = p->first_row[pi];
+        uint32_t hi = p->first_row[pi + 1];
+        for (uint32_t ri = lo; ri < hi; ri++) {
+            if (p->rows[ri].kind == TEPTRIS_PLAN_NESTED) {
+                uint32_t sub = p->rows[ri].sub;
+                if (depths[sub] <= depths[pi] + 1) {
+                    depths[sub] = depths[pi] + 1;
+                }
+            }
+        }
+    }
+    int too_deep = 0;
+    for (uint32_t pi = 0; pi < p->plan_count; pi++) {
+        if (depths[pi] > TEPTRIS_PLAN_MAX_DEPTH) {
+            too_deep = 1;
+        }
+    }
+    free(depths);
+    if (too_deep) {
+        teptris_plan_free(p);
+        *status = TEPTRIS_ERR_ARG;
+        return NULL;
+    }
     *status = TEPTRIS_OK;
     return p;
 }

data/lib/teptris/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Teptris
-  VERSION = "0.3.0.2"
+  VERSION = "0.3.4.1"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: teptris
 version: !ruby/object:Gem::Version
-  version: 0.3.0.2
+  version: 0.3.4.1
 platform: ruby
 authors:
 - teptris contributors
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-08 00:00:00.000000000 Z
+date: 2026-10-18 00:00:00.000000000 Z
 dependencies: []
 description: A native C extension over libteptris, a C99 TOML 1.1 parser/emitter.
   API shape mirrors the tomlib gem.