summaryrefslogtreecommitdiffhomepage
path: root/mrbgems/mruby-array-ext
diff options
context:
space:
mode:
authorYukihiro "Matz" Matsumoto <[email protected]>2017-04-02 20:32:11 +0900
committerYukihiro "Matz" Matsumoto <[email protected]>2017-04-02 20:32:11 +0900
commit5d00e853143016128bd54a3d09dae5cc488b7b2b (patch)
tree948d08965a60ab7962420f4eee702fa122904dea /mrbgems/mruby-array-ext
parent5a445f012e67caf71012808771055fb2dcef4278 (diff)
downloadmruby-5d00e853143016128bd54a3d09dae5cc488b7b2b.tar.gz
mruby-5d00e853143016128bd54a3d09dae5cc488b7b2b.zip
Fixed out of bounds access; fix #3572, ref #3553
Diffstat (limited to 'mrbgems/mruby-array-ext')
-rw-r--r--mrbgems/mruby-array-ext/src/array.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/mrbgems/mruby-array-ext/src/array.c b/mrbgems/mruby-array-ext/src/array.c
index 6f142095d..6919186bd 100644
--- a/mrbgems/mruby-array-ext/src/array.c
+++ b/mrbgems/mruby-array-ext/src/array.c
@@ -215,7 +215,7 @@ mrb_ary_slice_bang(mrb_state *mrb, mrb_value self)
}
ptr = a->ptr + i;
- for (j = i; j <= a->len - len; ++j) {
+ for (j = i; j < a->len - len; ++j) {
*ptr = *(ptr+len);
++ptr;
}