diff --git a/Kernel/Process.cpp b/Kernel/Process.cpp index e5f16db99f..14a8cb9423 100644 --- a/Kernel/Process.cpp +++ b/Kernel/Process.cpp @@ -1971,6 +1971,8 @@ bool Process::validate_read(const void* address, ssize_t size) const ASSERT(size >= 0); VirtualAddress first_address((u32)address); VirtualAddress last_address = first_address.offset(size - 1); + if (last_address < first_address) + return false; if (is_ring0()) { auto kmc_result = check_kernel_memory_access(first_address, false); if (kmc_result == KernelMemoryCheckResult::AccessGranted) @@ -1995,6 +1997,8 @@ bool Process::validate_write(void* address, ssize_t size) const ASSERT(size >= 0); VirtualAddress first_address((u32)address); VirtualAddress last_address = first_address.offset(size - 1); + if (last_address < first_address) + return false; if (is_ring0()) { if (is_kmalloc_address(address)) return true;