PR sanitizer/88289

	* asan.c (asan_redzone_buffer::flush_redzone_payload): Fix up
	an off-by-one for BYTES_BIG_ENDIAN.

git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@266708 138bc75d-0d04-0410-961f-82ee72b054a4

diff --git a/gcc/ChangeLog b/gcc/ChangeLog
index b215a9c635776365520e94deaa42575ca419035f..c84d6fa5c25af93116258041809eb1a6f349a749 100644 (file)
--- a/gcc/ChangeLog
+++ b/gcc/ChangeLog
@@ -1,5 +1,9 @@
 2018-12-01  Jakub Jelinek  <jakub@redhat.com>
 
+       PR sanitizer/88289
+       * asan.c (asan_redzone_buffer::flush_redzone_payload): Fix up
+       an off-by-one for BYTES_BIG_ENDIAN.
+
        PR target/54589
        * combine.c (find_split_point): For invalid memory address
        nonobj + obj + const, if reg + obj + const is valid addressing

diff --git a/gcc/asan.c b/gcc/asan.c
index 5d1d1dec064d5261e9dc96c3e8a62c4732a67dd4..0530ddd00564964f09aa0eee9ed7441689e2aaff 100644 (file)
--- a/gcc/asan.c
+++ b/gcc/asan.c
@@ -1326,7 +1326,7 @@ asan_redzone_buffer::flush_redzone_payload (void)
   for (unsigned i = 0; i < RZ_BUFFER_SIZE; i++)
     {
       unsigned char v
-       = m_shadow_bytes[BYTES_BIG_ENDIAN ? RZ_BUFFER_SIZE - i : i];
+       = m_shadow_bytes[BYTES_BIG_ENDIAN ? RZ_BUFFER_SIZE - i - 1 : i];
       val |= (unsigned HOST_WIDE_INT)v << (BITS_PER_UNIT * i);
       if (dump_file && (dump_flags & TDF_DETAILS))
        fprintf (dump_file, "%02x ", v);