From 6a3794ea917558776ba1a66a925f2d5e1dbf0724 Mon Sep 17 00:00:00 2001 From: Szabolcs Nagy Date: Tue, 11 Oct 2022 13:07:59 +0100 Subject: Fix off-by-one OOB read in elf/tst-tls20 The int mods[nmods] array on the stack was overread by one. Reviewed-by: Florian Weimer --- elf/tst-tls20.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'elf') diff --git a/elf/tst-tls20.c b/elf/tst-tls20.c index ce4635e..9cebe22 100644 --- a/elf/tst-tls20.c +++ b/elf/tst-tls20.c @@ -264,7 +264,7 @@ do_test_dependency (void) xdlclose (moddep); } - for (int n = 1; n <= nmods; n++) + for (int n = 1; n < nmods; n++) if (mods[n] != 0) unload_mod (n); } @@ -342,7 +342,7 @@ do_test_invalid_dependency (bool bind_now) xdlclose (moddep); } - for (int n = 1; n <= nmods; n++) + for (int n = 1; n < nmods; n++) if (mods[n] != 0) unload_mod (n); } -- cgit v1.1