tacit/minix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix boundscheck

Browse Source 
was checking upper bounds, but not lower bounds. This change fixes that.
This commit is contained in:
Ilja van Sprundel 2019-10-05 22:57:30 +02:00 committed by GitHub
parent 439ac04a65
commit 37230bf0c3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
minix/kernel/system/do_safecopy.c
View File

@ -412,7 +412,7 @@ int do_vsafecopy(struct proc * caller, message * m_ptr)
/* No. of vector elements. */ /* No. of vector elements. */
els = m_ptr->m_lsys_kern_vsafecopy.vec_size; els = m_ptr->m_lsys_kern_vsafecopy.vec_size;
if (els > SCPVEC_NR) { if (els < 0 || els > SCPVEC_NR) {
return EINVAL; return EINVAL;
} }
bytes = els * sizeof(struct vscp_vec); bytes = els * sizeof(struct vscp_vec);