-boundscheck

diff --git a/src/regex/regex.c b/src/regex/regex.c
index b0fb4c175252271f210edca9f27ea12de09ba997..99a9fd3b923729046a563b5da1d21b91245b237a 100644 (file)
--- a/src/regex/regex.c
+++ b/src/regex/regex.c
@@ -931,7 +931,7 @@ remove_epsilon (const char *str)
 static int
 strkcmp (const char *str1, const char *str2, size_t k)
 {
-  if (NULL == str1 || NULL == str2)
+  if ( (NULL == str1) || (NULL == str2) || (strlen(str1) < k) )
     return -1;
   return strcmp (&str1[k], str2);
 }