Fix array index error in address_v6 comparisons

	* include/experimental/internet (operator==, operator<): Fix loop
	condition to avoid reading past the end of the array.

From-SVN: r276153

diff --git a/libstdc++-v3/ChangeLog b/libstdc++-v3/ChangeLog
index 5d2349bcb7b4d1c1c042d03e38f3d54e9302dc12..8484a7e1249637c0adc972e7c28be6b9ad9ddf27 100644 (file)
--- a/libstdc++-v3/ChangeLog
+++ b/libstdc++-v3/ChangeLog
@@ -1,5 +1,8 @@
 2019-09-26  Jonathan Wakely  <jwakely@redhat.com>
 
+       * include/experimental/internet (operator==, operator<): Fix loop
+       condition to avoid reading past the end of the array.
+
        * include/std/array: Remove references to profile mode.
        * include/std/bitset: Likewise.
        * include/std/deque: Likewise.

diff --git a/libstdc++-v3/include/experimental/internet b/libstdc++-v3/include/experimental/internet
index 44d757c3a9771aafc6fc9629a3742d4476300977..929a747a2502785023caacb58172aca735194854 100644 (file)
--- a/libstdc++-v3/include/experimental/internet
+++ b/libstdc++-v3/include/experimental/internet
@@ -539,7 +539,7 @@ namespace ip
     const auto& __aa = __a._M_bytes;
     const auto& __bb = __b._M_bytes;
     int __i = 0;
-    for (; __aa[__i] == __bb[__i] && __i < 16; ++__i)
+    for (; __i < 16 && __aa[__i] == __bb[__i]; ++__i)
       ;
     return __i == 16 ? __a.scope_id() == __b.scope_id() : false;
   }
@@ -554,7 +554,7 @@ namespace ip
     const auto& __aa = __a._M_bytes;
     const auto& __bb = __b._M_bytes;
     int __i = 0;
-    for (; __aa[__i] == __bb[__i] && __i < 16; ++__i)
+    for (; __i < 16 && __aa[__i] == __bb[__i]; ++__i)
       ;
     return __i == 16 ? __a.scope_id() < __b.scope_id() : __aa[__i] < __bb[__i];
   }