Merge pull request #23 from datachainlab/audit-202409-lcp-4

LCP-4: Fix out-of-boundary access in `LCPUtils::readBytesUntil()` Signed-off-by: Jun Kimura <[email protected]>
datachainlab · Nov 18, 2024 · e073fa3 · e073fa3
2 parents 54d2bac + b7c7d33
commit e073fa3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/contracts/LCPUtils.sol b/contracts/LCPUtils.sol
@@ -17,7 +17,7 @@ library LCPUtils {
         pure
         returns (bytes memory bz, uint256 pos)
     {
-        pos = BytesUtils.find(src, offset, src.length, needle);
+        pos = BytesUtils.find(src, offset, src.length - offset, needle);
         if (pos == type(uint256).max) {
             revert LCPUtilsReadBytesUntilNotFound();
         }