From 56a4353a8e4cb32a642dee06724c598f46d9d025 Mon Sep 17 00:00:00 2001
From: deuce <>
Date: Tue, 28 Apr 2020 20:45:07 +0000
Subject: [PATCH] Fix out-of-bounds read in do_backtab().
---
src/conio/cterm.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/conio/cterm.c b/src/conio/cterm.c
index f1601ae1b9..17c0bae1c0 100644
--- a/src/conio/cterm.c
+++ b/src/conio/cterm.c
@@ -2153,7 +2153,7 @@ do_backtab(struct cterminal *cterm)
CURR_XY(&cx, &cy);
ox = cx;
- for (i = cterm->tab_count; i >= 0; i--) {
+ for (i = cterm->tab_count - 1; i >= 0; i--) {
if (cterm->tabs[i] < cx) {
cx = cterm->tabs[i];
break;
--
GitLab