Validate timeout in ThreadHandle::join to prevent panic

ever0de · ever0de · commit 6f8ad6fc455f · 2026-02-28T23:12:54.000+09:00
diff --git a/crates/vm/src/stdlib/thread.rs b/crates/vm/src/stdlib/thread.rs
@@ -1096,7 +1096,17 @@ pub(crate) mod _thread {
             let timeout_duration = match timeout.flatten() {
                 Some(t) => {
                     let secs = t.to_secs_f64();
-                    (secs >= 0.0).then(|| Duration::from_secs_f64(secs))
+                    if secs >= 0.0 {
+                        let nanos = secs * 1_000_000_000.0;
+                        if secs > TIMEOUT_MAX || nanos < 0.0 || !nanos.is_finite() {
+                            return Err(vm.new_overflow_error(
+                                "timestamp too large to convert to Rust Duration".to_owned(),
+                            ));
+                        }
+                        Some(Duration::from_secs_f64(secs))
+                    } else {
+                        None
+                    }
                 }
                 _ => None,
             };
