Merge branch 'main' into dependabot/submodules/external/bpf_conforman…

…ce-41ec319
iovisor · Apr 27, 2024 · d5a3f0a · d5a3f0a
2 parents c8a2a8d + 7d6da19
commit d5a3f0a
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 5 deletions.
diff --git a/.github/workflows/posix.yml b/.github/workflows/posix.yml
@@ -66,7 +66,7 @@ jobs:
 
     - name: Initialize CodeQL
       if: inputs.build_codeql == true
-      uses: github/codeql-action/init@4355270be187e1b672a7a1c7c7bae5afdc1ab94a
+      uses: github/codeql-action/init@c7f9125735019aa87cfc361530512d50ea439c71
       with:
         languages: 'cpp'
 
@@ -295,4 +295,4 @@ jobs:
 
     - name: Perform CodeQL Analysis
       if: inputs.build_codeql == true
-      uses: github/codeql-action/analyze@4355270be187e1b672a7a1c7c7bae5afdc1ab94a
+      uses: github/codeql-action/analyze@c7f9125735019aa87cfc361530512d50ea439c71
diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
@@ -42,7 +42,7 @@ jobs:
 
     - name: Initialize CodeQL
       if: inputs.build_codeql == true
-      uses: github/codeql-action/init@4355270be187e1b672a7a1c7c7bae5afdc1ab94a
+      uses: github/codeql-action/init@c7f9125735019aa87cfc361530512d50ea439c71
       with:
         languages: 'cpp'
 
@@ -104,4 +104,4 @@ jobs:
 
     - name: Perform CodeQL Analysis
       if: inputs.build_codeql == true
-      uses: github/codeql-action/analyze@4355270be187e1b672a7a1c7c7bae5afdc1ab94a
+      uses: github/codeql-action/analyze@c7f9125735019aa87cfc361530512d50ea439c71
diff --git a/vm/ubpf_vm.c b/vm/ubpf_vm.c
@@ -1118,7 +1118,7 @@ validate(const struct ubpf_vm* vm, const struct ebpf_inst* insts, uint32_t num_i
                 }
             } else if (inst.src == 1) {
                 int call_target = i + (inst.imm + 1);
-                if (call_target < 0 || call_target > num_insts) {
+                if (call_target < 0 || call_target >= num_insts) {
                     *errmsg =
                         ubpf_error("call to local function (at PC %d) is out of bounds (target: %d)", i, call_target);
                     return false;