mirror of
https://github.com/AFLplusplus/AFLplusplus.git
synced 2025-06-18 20:48:07 +00:00
Fix off by one bounds check
`is_hex` reads two bytes but caller previously only ensured that one byte was in bounds.
This commit is contained in:
@ -2136,7 +2136,7 @@ static u8 rtn_extend_encoding(afl_state_t *afl, u8 entry,
|
||||
|
||||
if ((i % 2)) {
|
||||
|
||||
if (len > idx + i && is_hex(orig_buf + idx + i)) {
|
||||
if (len > idx + i + 1 && is_hex(orig_buf + idx + i)) {
|
||||
|
||||
fromhex += 2;
|
||||
|
||||
|
Reference in New Issue
Block a user