tablet/grub
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

normal/charset: Fix underflow and overflow in loop init

Browse Source 
In bidi_line_wrap(), "kk - 1" in the for loop init, "i = kk - 1",
underflows when "kk" (unsigned int) is 0. Assigning the result of
"kk - 1" to signed int "i" may cause overflow. To address both
issues, cast "kk" to a signed type before subtraction to ensure
safe arithmetic and assignment.

Fixed: CID 473874

Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Reviewed-by: Sudhakar Kuppusamy <sudhakar@linux.ibm.com>
This commit is contained in:
Lidong Chen 2025-06-18 19:24:23 +00:00 committed by Daniel Kiper
parent ba8eadde6b
commit 8c2d4e64ff
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
grub-core/normal/charset.c
View File

@ -738,7 +738,7 @@ bidi_line_wrap (struct grub_unicode_glyph *visual_out,
{
int right_join = 0;
signed i;
for (i = kk - 1; i >= 0 && (unsigned) i + 1 > line_start;
for (i = (signed) kk - 1; i >= 0 && (unsigned) i + 1 > line_start;
i--)
{
enum grub_join_type join_type = get_join_type (visual[i].base);