From: Mark Wooding <mdw@distorted.org.uk>
Date: Sat, 29 Jul 2017 00:02:46 +0000 (+0100)
Subject: base/keysz.c: Fix bogus pointer dereference on wide-arg key size lists.
X-Git-Tag: 2.4.2~31
X-Git-Url: https://git.distorted.org.uk/~mdw/catacomb/commitdiff_plain/0588f9b2eed9ae38883806d754bdd879823038cf

base/keysz.c: Fix bogus pointer dereference on wide-arg key size lists.

I must have been seriously short on brain that day.
---

diff --git a/base/keysz.c b/base/keysz.c
index 48c965e3..8e5e2caf 100644
--- a/base/keysz.c
+++ b/base/keysz.c
@@ -56,7 +56,7 @@ size_t keysz(size_t sz, const octet *ksz)
   unsigned t, u, v;
 
   ksz++;
-#define ARG(i) (wd == 1 ? ksz[i] : LOAD16(2*i))
+#define ARG(i) (wd == 1 ? ksz[i] : LOAD16(ksz + 2*i))
   if (sz == 0)
     return (ARG(0));
   else switch (op) {