fix memory corruption in deleteat! (#41646)

n.b. `n == a->nrows + dec` Fixes JuliaData/DataFrames.jl#2819
JuliaLang · Jul 21, 2021 · 2e06a01 · 2e06a01
1 parent ed93e30
commit 2e06a01
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/array.c b/src/array.c
@@ -1119,7 +1119,7 @@ STATIC_INLINE void jl_array_del_at_beg(jl_array_t *a, size_t idx, size_t dec,
         // Move the rest of the data if the offset changed
         if (newoffs != offset) {
             memmove_safe(a->flags.hasptr, newdata + nb1, olddata + nb1 + nbdec, nbtotal - nb1);
-            if (isbitsunion) memmove(newtypetagdata + idx, typetagdata + idx + dec, n - idx);
+            if (isbitsunion) memmove(newtypetagdata + idx, typetagdata + idx + dec, a->nrows - idx);
         }
         a->data = newdata;
     }