diff options
author | Alastair Reid <adreid@google.com> | 2020-11-02 16:47:51 +0000 |
---|---|---|
committer | Cristian Cadar <c.cadar@imperial.ac.uk> | 2020-11-03 13:15:06 +0000 |
commit | bef9f39d033ea5c9600f39af7cfd213e01aab4c1 (patch) | |
tree | 6e9e1ac2f03045850ddf0dcebb1706d7f8872844 /runtime | |
parent | 909bca0e15282a56e3345850fb23a8f16c9e39e6 (diff) | |
download | klee-bef9f39d033ea5c9600f39af7cfd213e01aab4c1.tar.gz |
fix: bcmp with n==0
This was executing the loop when n==0 leading to an out of bound pointer error. Found while verifying Rust code that compares strings.
Diffstat (limited to 'runtime')
-rw-r--r-- | runtime/klee-libc/bcmp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/runtime/klee-libc/bcmp.c b/runtime/klee-libc/bcmp.c index 23e1c233..306523fb 100644 --- a/runtime/klee-libc/bcmp.c +++ b/runtime/klee-libc/bcmp.c @@ -11,7 +11,7 @@ int bcmp(const void *s1, const void *s2, size_t n) { const unsigned char *p1 = s1, *p2 = s2; - while (--n != 0) { + while (n-- != 0) { if (*p1++ != *p2++) return 1; } |