From 02b6ac31f190d9423f68fa94d0dfabd34e32600a Mon Sep 17 00:00:00 2001
From: daurnimator <quae@daurnimator.com>
Date: Sun, 21 May 2017 20:50:45 +1000
Subject: src/lobject.js: parseFloat ignores trailing junk, validate with regex
 first

---
 src/lobject.js | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

(limited to 'src')

diff --git a/src/lobject.js b/src/lobject.js
index 18876a9..4e0fa6f 100644
--- a/src/lobject.js
+++ b/src/lobject.js
@@ -350,9 +350,17 @@ const lua_strx2number = function(s) {
     return s.length === 0 ? luaconf.ldexp(r, e) : null;  /* Only valid if nothing left is s*/
 };
 
+const lua_str2number = function(s) {
+    /* parseFloat ignores trailing junk, validate with regex first */
+    let str = defs.to_jsstring(s);
+    if (!/^[\t\v\f \n\r]*[\+\-]?([0-9]+\.?[0-9]*|\.[0-9]*)([eE][\+\-]?[0-9]+)?[\t\v\f \n\r]*$/.test(str))
+        return null;
+    let flt = parseFloat(str);
+    return !isNaN(flt) ? flt : null;
+};
+
 const l_str2dloc = function(s, mode) {
-    let flt = mode === 'x' ? lua_strx2number(s) : parseFloat(defs.to_jsstring(s));
-    return !isNaN(flt) ? flt : null;  /* OK if no trailing characters */
+    return mode === 'x' ? lua_strx2number(s) : lua_str2number(s);
 };
 
 const l_str2d = function(s) {
-- 
cgit v1.2.3-70-g09d2