fix(frontmatter): Restrict code fence length

Port rust-lang/rust#149358 over to Cargo

Author: epage

src/cargo/util/frontmatter.rs

@@ -75,6 +75,14 @@ impl<'s> ScriptSource<'s> {
                     raw.len()..raw.len(),
                 ).push_visible_span(open_start..open_end));
             }
+            _ if u8::try_from(fence_length).is_err() => {
+                return Err(FrontmatterError::new(
+                    format!(
+                        "too many `-` symbols: frontmatter openings may be delimited by up to 255 `-` symbols, but found {fence_length}"
+                    ),
+                    open_start..open_end,
+                ));
+            }
             _ => {}
         }
         source.open = Some(open_start..open_end);

tests/testsuite/script/rustc.rs

@@ -274,8 +274,8 @@ fn fence_mismatch_2() {
 #[rustfmt::skip]  // code-generated
 fn fence_too_many_dashes() {
     let fixture_path = "tests/testsuite/script/rustc_fixtures/fence-too-many-dashes.rs";
-    let assertion_path = "tests/testsuite/script/rustc_fixtures/fence-too-many-dashes.stdout";
-    assert_success(fixture_path, assertion_path);
+    let assertion_path = "tests/testsuite/script/rustc_fixtures/fence-too-many-dashes.stderr";
+    assert_failure(fixture_path, assertion_path);
 }
 
 #[cargo_test(nightly, reason = "-Zscript is unstable")]

tests/testsuite/script/rustc_fixtures/fence-too-many-dashes.stderr

@@ -0,0 +1,5 @@
+[ERROR] too many `-` symbols: frontmatter openings may be delimited by up to 255 `-` symbols, but found 256
+ --> script:1:1
+  |
+1 | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
+  | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^