Accessing array out of bound is possible in ras_push

[go-sc]

In branch temu-2019-12-21-port, src/riscvsim/ras.c:82:
the overflow check in ras_push method

marss-riscv/src/riscvsim/ras.c

Line 82 in 820576e

if (ras->spfill > ras->max_size)

is incorrect. Should be

if (ras->spfill >= ras->max_size)

Otherwise out of bounds access is possible in

marss-riscv/src/riscvsim/ras.c

Line 76 in 820576e

ras->entry[ras->spfill] = pc;

[gkothar1]

closed in commit fece3e0