commit 9b211a5076310f14081dd257b0cbac6857534bc3
author Louis Dionne <ldionne@apple.com> Tue Aug 11 15:29:00 2020 -0400
committer Louis Dionne <ldionne@apple.com> Tue Aug 11 15:37:57 2020 -0400
tree 5efa8b5e4265eb6faa92fd84fe58aaa9d1032921
parent b9c1bd39d017ab3a480a973234c276ff14b36e58

[libunwind] Fix incorrect check for out-of-boundedness

If the personalityIndex (which is 0-based) is equal to the length of
the personality array, we should error out.

rdar://18013273

libunwind/src/UnwindCursor.hpp

diff --git a/libunwind/src/UnwindCursor.hpp b/libunwind/src/UnwindCursor.hpp
index 48902ea..03e21fb 100644
--- a/libunwind/src/UnwindCursor.hpp
+++ b/libunwind/src/UnwindCursor.hpp
@@ -1764,7 +1764,7 @@
                               (__builtin_ctz(UNWIND_PERSONALITY_MASK));
   if (personalityIndex != 0) {
     --personalityIndex; // change 1-based to zero-based index
-    if (personalityIndex > sectionHeader.personalityArrayCount()) {
+    if (personalityIndex >= sectionHeader.personalityArrayCount()) {
       _LIBUNWIND_DEBUG_LOG("found encoding 0x%08X with personality index %d,  "
                             "but personality table has only %d entries",
                             encoding, personalityIndex,