fix out-of-bounds check in lock_dbg_cb (was too lose to detect all

invalid cases)

PR: 674

diff --git a/apps/openssl.c b/apps/openssl.c
index 45af2ba7f9a8281afcb7ab527a82941deba867b0..e0d89d4ab413fee3c8c22ee62d96b6f687227c2b 100644 (file)
--- a/apps/openssl.c
+++ b/apps/openssl.c
@@ -163,7 +163,7 @@ static void lock_dbg_cb(int mode, int type, const char *file, int line)
                goto err;
                }
 
-       if (type < 0 || type > CRYPTO_NUM_LOCKS)
+       if (type < 0 || type >= CRYPTO_NUM_LOCKS)
                {
                errstr = "type out of bounds";
                goto err;

diff --git a/ssl/ssltest.c b/ssl/ssltest.c
index 47c383200ae62cdf3850db1afe6125032346a061..42289c255b27e00328bf2c5e11fac788f801e02d 100644 (file)
--- a/ssl/ssltest.c
+++ b/ssl/ssltest.c
@@ -290,7 +290,7 @@ static void lock_dbg_cb(int mode, int type, const char *file, int line)
                goto err;
                }
 
-       if (type < 0 || type > CRYPTO_NUM_LOCKS)
+       if (type < 0 || type >= CRYPTO_NUM_LOCKS)
                {
                errstr = "type out of bounds";
                goto err;