* alloc.c (gc_sweep): Don't read past end of array.

In theory, the old code could also have corrupted Emacs internals,
though it'd be very unlikely.

2 files changed, 7 insertions, 1 deletions

diff --git a/src/ChangeLog b/src/ChangeLog
index 07c707eacdc..386ed435b2a 100644
--- a/src/ChangeLog
+++ b/src/ChangeLog
@@ -1,3 +1,9 @@
+2011-07-13  Paul Eggert  <eggert@cs.ucla.edu>
+
+        * alloc.c (gc_sweep): Don't read past end of array.
+        In theory, the old code could also have corrupted Emacs internals,
+        though it'd be very unlikely.
+
 2011-07-12  Andreas Schwab  <schwab@linux-m68k.org>
 
         * character.c (Fcharacterp): Don't advertise optional ignored
diff --git a/src/alloc.c b/src/alloc.c
index 6ba080c0b4c..44f935c243d 100644
--- a/src/alloc.c
+++ b/src/alloc.c
@@ -5733,7 +5733,7 @@ gc_sweep (void)
         int ilim = (lim + BITS_PER_INT - 1) / BITS_PER_INT;
 
         /* Scan the mark bits an int at a time.  */
-        for (i = 0; i <= ilim; i++)
+        for (i = 0; i < ilim; i++)
           {
             if (cblk->gcmarkbits[i] == -1)
               {