[jit] Fix a buffer overflow in mini_get_gsharedvt_out_sig_wrapper_sig…

…nature (). Fixes #12130.
mono · Dec 19, 2018 · a0db72b · a0db72b
1 parent 2a91002
commit a0db72b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mono/mini/mini-generic-sharing.c b/mono/mini/mini-generic-sharing.c
@@ -1732,7 +1732,7 @@ mini_get_interp_lmf_wrapper (void)
 MonoMethodSignature*
 mini_get_gsharedvt_out_sig_wrapper_signature (gboolean has_this, gboolean has_ret, int param_count)
 {
-	MonoMethodSignature *sig = g_malloc0 (sizeof (MonoMethodSignature) + (32 * sizeof (MonoType*)));
+	MonoMethodSignature *sig = g_malloc0 (sizeof (MonoMethodSignature) + ((param_count + 3) * sizeof (MonoType*)));
 	int i, pindex;
 	MonoType *int_type = mono_get_int_type ();