hongjinghao e39b856bde preproc: fix heap memory overflow CVE-2023-31722 ...

paramlen has heap memory of length nparam+1. The value of variable i
may be greater than nparam+1, causing heap memory overflow. Therefore,
i and nparam+1 needs to be determined in the loop.

Fixes: https://bugzilla.nasm.us/show_bug.cgi?id=3392857#c1
Fixes: https://github.com/netwide-assembler/nasm/pull/83
Signed-off-by: H. Peter Anvin (Intel) <hpa@zytor.com>

2025-10-07 14:58:03 -07:00

3.3 KiB

Raw Blame History

View Raw