From d37c451e8150c0e2d3e8c0f807ecba7d52d585e0 Mon Sep 17 00:00:00 2001 From: Joachim Nilsson Date: Wed, 26 Nov 2014 17:20:27 +0100 Subject: [PATCH] svc_start(): Fix out of bounds write to args[] array. Signed-off-by: Joachim Nilsson --- svc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/svc.c b/svc.c index 94d7c7c9..50f5530a 100644 --- a/svc.c +++ b/svc.c @@ -479,7 +479,7 @@ int svc_start(svc_t *svc) setuid(uid); /* Serve copy of args to process in case it modifies them. */ - for (i = 0; i < MAX_NUM_SVC_ARGS && svc->args[i][0] != 0; i++) + for (i = 0; i < (MAX_NUM_SVC_ARGS - 1) && svc->args[i][0] != 0; i++) args[i] = svc->args[i]; args[i] = NULL;