fix out-of-bounds check in lock_dbg_cb (was too lose to detect all

invalid cases)

PR: 674

diff --git a/apps/openssl.c b/apps/openssl.c
index 45af2ba7f9a8281afcb7ab527a82941deba867b0..e0d89d4ab413fee3c8c22ee62d96b6f687227c2b 100644 (file)
--- a/apps/openssl.c
+++ b/apps/openssl.c
@@ -163,7 +163,7 @@ static void lock_dbg_cb(int mode, int type, const char *file, int line)
                goto err;
                }
 
-       if (type < 0 || type > CRYPTO_NUM_LOCKS)
+       if (type < 0 || type >= CRYPTO_NUM_LOCKS)
                {
                errstr = "type out of bounds";
                goto err;

diff --git a/ssl/ssltest.c b/ssl/ssltest.c
index a304398b9f6930ccecec294df00731d5b0cc7fe1..7bb4152000cf4bb5c24409c1b9af4e917243bdc2 100644 (file)
--- a/ssl/ssltest.c
+++ b/ssl/ssltest.c
@@ -303,7 +303,7 @@ static void lock_dbg_cb(int mode, int type, const char *file, int line)
                goto err;
                }
 
-       if (type < 0 || type > CRYPTO_NUM_LOCKS)
+       if (type < 0 || type >= CRYPTO_NUM_LOCKS)
                {
                errstr = "type out of bounds";
                goto err;