fix memory region validation in argptr()

jiraiyew · Sep 26, 2016 · 2a67508 · 2a67508
1 parent 0df5f11
commit 2a67508
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/syscall.c b/syscall.c
@@ -58,7 +58,7 @@ argptr(int n, char **pp, int size)
 
   if(argint(n, &i) < 0)
     return -1;
-  if((uint)i >= proc->sz || (uint)i+size > proc->sz)
+  if(size < 0 || (uint)i >= proc->sz || (uint)i+size > proc->sz)
     return -1;
   *pp = (char*)i;
   return 0;