BUG: prevent nonzero memchr from running out of bounds

juliantaylor · juliantaylor · commit cf26fc9a0750 · 2014-03-10T18:30:10.000+01:00
diff --git a/numpy/core/src/multiarray/item_selection.c b/numpy/core/src/multiarray/item_selection.c
@@ -2472,7 +2472,8 @@ PyArray_Nonzero(PyArrayObject *self)
                 npy_intp subsize;
                 npy_intp j = 0;
                 while (1) {
-                    npy_memchr(data + j * stride, 0, stride, count, &subsize, 1);
+                    npy_memchr(data + j * stride, 0, stride, count - j,
+                               &subsize, 1);
                     j += subsize;
                     if (j >= count) {
                         break;
