From: Paul Eggert <eggert@cs.ucla.edu>
Date: Wed, 28 Nov 2018 05:36:18 +0000 (-0800)
Subject: Fix core dump in dbus-message-internal
X-Git-Tag: emacs-27.0.90~4085
X-Git-Url: http://git.eshelyaron.com/gitweb/?a=commitdiff_plain;h=cef3f8fbf98296eaa59f80716db33b4f8689889a;p=emacs.git

Fix core dump in dbus-message-internal

* src/dbusbind.c (Fdbus_message_internal):
Don’t go past array end (Bug#33530).
---

diff --git a/src/dbusbind.c b/src/dbusbind.c
index 9bc344e9612..403fc598c09 100644
--- a/src/dbusbind.c
+++ b/src/dbusbind.c
@@ -1423,7 +1423,7 @@ usage: (dbus-message-internal &rest REST)  */)
   for (; count < nargs; ++count)
     {
       dtype = XD_OBJECT_TO_DBUS_TYPE (args[count]);
-      if (XD_DBUS_TYPE_P (args[count]))
+      if (count + 1 < nargs && XD_DBUS_TYPE_P (args[count]))
 	{
 	  XD_DEBUG_VALID_LISP_OBJECT_P (args[count]);
 	  XD_DEBUG_VALID_LISP_OBJECT_P (args[count+1]);