Issue #22086 has been updated by nagachika (Tomoyuki Chikanaga). Backport changed from 3.3: WONTFIX, 3.4: REQUIRED, 4.0: REQUIRED to 3.3: WONTFIX, 3.4: DONE, 4.0: REQUIRED backported into ruby_3_4 at: commit:513c0835f72d53e21016742ca098d0b0f9792f15 commit:00e51cf79c1770dd4505658ce9affd69d5699fa9 commit:6de25456a2f245053a1cd0c1cac8699dcb261721 ---------------------------------------- Bug #22086: Backport Marshal overflow fix https://bugs.ruby-lang.org/issues/22086#change-117427 * Author: nobu (Nobuyoshi Nakada) * Status: Closed * Backport: 3.3: WONTFIX, 3.4: DONE, 4.0: REQUIRED ---------------------------------------- GH-17130 * commit:8ed456afc95ccb23256fe10036cd0d9678ceb245 Marshal.load: Fix buffer overflow at overread * commit:2510dfee2a6aba9e99664b453e2be69e00eb21a6 Marshal.load: Fix integer overflow of length * commit:3f6d6c0373d2cb005f7cf164414cbb531f42d525 Marshal.load: Check bignum sign -- https://bugs.ruby-lang.org/