Allocate N+1 arrays instead of N to avoid out-of-bounds access when unzipping loops (#2663)

1 files changed, 1 insertions, 1 deletions

diff --git a/source/slang/slang-ir-autodiff-unzip.h b/source/slang/slang-ir-autodiff-unzip.h
index eb8b09417..2d5261b63 100644
--- a/source/slang/slang-ir-autodiff-unzip.h
+++ b/source/slang/slang-ir-autodiff-unzip.h
@@ -588,7 +588,7 @@ struct DiffUnzipPass
                     arrayType,
                     builder.getIntValue(
                         builder.getUIntType(),
-                        region->maxIters));
+                        region->maxIters + 1));
             }
 
             // Reverse the list since the indices needs to be