(live_float_p): Check that p is not past the `floats' array,

now that `floats' is not the last element of the struct any more.

1 files changed, 1 insertions, 0 deletions

diff --git a/src/alloc.c b/src/alloc.c
index 92fd44dcdac..169d292c1b3 100644
--- a/src/alloc.c
+++ b/src/alloc.c
@@ -3468,6 +3468,7 @@ live_float_p (m, p)
       /* P must point to the start of a Lisp_Float and not be
          one of the unused cells in the current float block.  */
       return (offset >= 0
+              && offset < (FLOAT_BLOCK_SIZE * sizeof b->floats[0])
               && offset % sizeof b->floats[0] == 0
               && (b != float_block
                   || offset / sizeof b->floats[0] < float_block_index));