diff options
| author | Peter Wemm <peter@FreeBSD.org> | 2018-10-08 08:30:10 +0000 |
|---|---|---|
| committer | Peter Wemm <peter@FreeBSD.org> | 2018-10-08 08:30:10 +0000 |
| commit | d29ecdf27f1804b1c533a3739282650ed83dbe31 (patch) | |
| tree | 2528d825a15b6f1f2926dd55d258d6d296c787cc /dbm/sdbm/sdbm_pair.c | |
| parent | f5bbf7923e42e842c4c6d067e48b2a94bc40de0d (diff) | |
Notes
Diffstat (limited to 'dbm/sdbm/sdbm_pair.c')
| -rw-r--r-- | dbm/sdbm/sdbm_pair.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/dbm/sdbm/sdbm_pair.c b/dbm/sdbm/sdbm_pair.c index 2130200734e8..50d7965b1415 100644 --- a/dbm/sdbm/sdbm_pair.c +++ b/dbm/sdbm/sdbm_pair.c @@ -308,7 +308,8 @@ char *pag; if (n > 0) { off = PBLKSIZ; for (ino++; n > 0; ino += 2) { - if (ino[0] > off || ino[1] > off || + if (ino[0] < 0 || ino[0] > off || + ino[1] < 0 || ino[1] > off || ino[1] > ino[0]) return 0; off = ino[1]; |