memory-util: avoid passing invalid pointer to memcmp() when length == 16

If length is exactly 16, the loop would finish with length == 0,
but we'd carry on to the memcmp() check, where the 'p + 16' passed
would be invalid memory. memcmp() demands valid pointers even if
size is specified to 0, hence let's catch this ourselves.
This commit is contained in:
Mike Yuan
2026-03-25 21:49:04 +01:00
committed by Daan De Meyer
parent 247ef81b6f
commit f3d385da2a
+6 -4
View File
@@ -3,6 +3,8 @@
#include "memory-util-fundamental.h"
bool memeqbyte(uint8_t byte, const void *data, size_t length) {
assert(data || length == 0);
/* Does the buffer consist entirely of the same specific byte value?
* Copied from https://github.com/systemd/casync/, copied in turn from
* https://github.com/rustyrussell/ccan/blob/master/ccan/mem/mem.c#L92,
@@ -12,12 +14,12 @@ bool memeqbyte(uint8_t byte, const void *data, size_t length) {
const uint8_t *p = data;
/* Check first 16 bytes manually */
for (size_t i = 0; i < 16; i++, length--) {
if (length == 0)
return true;
for (size_t i = 0; i < 16 && length > 0; i++, length--)
if (p[i] != byte)
return false;
}
if (length == 0)
return true;
/* Now we know first 16 bytes match, memcmp() with self. */
return memcmp(data, p + 16, length) == 0;