local-qsort-memory-corruption

Gbp-Pq: Topic any
Gbp-Pq: Name local-qsort-memory-corruption.patch

diff --git a/stdlib/qsort.c b/stdlib/qsort.c
index 9599d2bd573a7e08de8c38d9cc543811da810ee3..98b7e2b7ab754579dc839161a79884872cea2d28 100644 (file)
--- a/stdlib/qsort.c
+++ b/stdlib/qsort.c
@@ -224,7 +224,8 @@ _quicksort (void *const pbase, size_t total_elems, size_t size,
     while ((run_ptr += size) <= end_ptr)
       {
        tmp_ptr = run_ptr - size;
-       while ((*cmp) ((void *) run_ptr, (void *) tmp_ptr, arg) < 0)
+       while (tmp_ptr != base_ptr
+              && (*cmp) ((void *) run_ptr, (void *) tmp_ptr, arg) < 0)
          tmp_ptr -= size;
 
        tmp_ptr += size;