From 33438037e00ec750bff020578b1a5b6f75f60555 Mon Sep 17 00:00:00 2001 From: Adam Majer Date: Fri, 17 Aug 2018 14:41:02 +0800 Subject: [PATCH] fix CVE-2018-8882 https://bugzilla.nasm.us/show_bug.cgi?id=3392445 Upstream-Status: Submitted [https://bugzilla.nasm.us/show_bug.cgi?id=3392445] CVE: CVE-2018-8882 Signed-off-by: Hongxu Jia --- asm/float.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/asm/float.c b/asm/float.c index dcf69fea..2965d3db 100644 --- a/asm/float.c +++ b/asm/float.c @@ -608,6 +608,8 @@ static void ieee_shr(fp_limb *mant, int i) if (offs) for (j = MANT_LIMBS-1; j >= offs; j--) mant[j] = mant[j-offs]; + } else if (MANT_LIMBS-1-offs < 0) { + j = MANT_LIMBS-1; } else { n = mant[MANT_LIMBS-1-offs] >> sr; for (j = MANT_LIMBS-1; j > offs; j--) { -- 2.17.1