mirror of
https://github.com/netwide-assembler/nasm.git
synced 2025-10-10 00:25:06 -04:00
paramlen has heap memory of length nparam+1. The value of variable i may be greater than nparam+1, causing heap memory overflow. Therefore, i and nparam+1 needs to be determined in the loop. Fixes: https://bugzilla.nasm.us/show_bug.cgi?id=3392857#c1 Fixes: https://github.com/netwide-assembler/nasm/pull/83 Signed-off-by: H. Peter Anvin (Intel) <hpa@zytor.com>