fix memory region validation in argptr()

diff --git a/syscall.c b/syscall.c
index a84a9219a51e75d10a04014331cebbd990a4ca82..9ae75367cd495a71737764ded186ec94c2bfcbda 100644 (file)
--- a/syscall.c
+++ b/syscall.c
@@ -58,7 +58,7 @@ argptr(int n, char **pp, int size)
 
   if(argint(n, &i) < 0)
     return -1;
-  if((uint)i >= proc->sz || (uint)i+size > proc->sz)
+  if(size < 0 || (uint)i >= proc->sz || (uint)i+size > proc->sz)
     return -1;
   *pp = (char*)i;
   return 0;