From: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Date: Sat, 1 Jun 2024 21:16:35 +0000 (+0200)
Subject: local-qsort-memory-corruption
X-Git-Tag: archive/raspbian/2.38-12+rpi1^2~7
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=5d637b5b81d00f87a749b718196d970b9424c8ff;p=glibc.git

local-qsort-memory-corruption


Gbp-Pq: Topic any
Gbp-Pq: Name local-qsort-memory-corruption.patch
---

diff --git a/stdlib/qsort.c b/stdlib/qsort.c
index 728a0ed37..b11ad3a87 100644
--- a/stdlib/qsort.c
+++ b/stdlib/qsort.c
@@ -224,7 +224,8 @@ _quicksort (void *const pbase, size_t total_elems, size_t size,
     while ((run_ptr += size) <= end_ptr)
       {
 	tmp_ptr = run_ptr - size;
-	while ((*cmp) ((void *) run_ptr, (void *) tmp_ptr, arg) < 0)
+	while (tmp_ptr != base_ptr
+	       && (*cmp) ((void *) run_ptr, (void *) tmp_ptr, arg) < 0)
 	  tmp_ptr -= size;
 
 	tmp_ptr += size;