2015-07-29 06:18:54

by Dohyun Pyun

Subject: [PATCH BLUEZ] tools/bneptest: Fix not NULL terminating parsed string

From: DoHyun Pyun <[email protected]>

This patch prevents the possible not NULL terminating problem.
ifr_name's array size is IFNAMSIZ. So If bridge has IFNAMSIZ size,
the name string will be not NULL terminating.
---
tools/bneptest.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/bneptest.c b/tools/bneptest.c
index a7d5815..1404252 100644
--- a/tools/bneptest.c
+++ b/tools/bneptest.c
@@ -89,7 +89,7 @@ static int set_forward_delay(int sk)
struct ifreq ifr;

memset(&ifr, 0, sizeof(ifr));
- strncpy(ifr.ifr_name, bridge, IFNAMSIZ);
+ strncpy(ifr.ifr_name, bridge, IFNAMSIZ - 1);
ifr.ifr_data = (char *) args;

if (ioctl(sk, SIOCDEVPRIVATE, &ifr) < 0) {
--
1.8.1.2

2015-07-29 07:29:50

by Szymon Janc

Subject: Re: [PATCH BLUEZ] tools/bneptest: Fix not NULL terminating parsed string

Hi Dohyun Pyun,

On Wednesday 29 of July 2015 15:18:54 Dohyun Pyun wrote:
> From: DoHyun Pyun <[email protected]>
>
> This patch prevents the possible not NULL terminating problem.
> ifr_name's array size is IFNAMSIZ. So If bridge has IFNAMSIZ size,
> the name string will be not NULL terminating.
> ---
> tools/bneptest.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/tools/bneptest.c b/tools/bneptest.c
> index a7d5815..1404252 100644
> --- a/tools/bneptest.c
> +++ b/tools/bneptest.c
> @@ -89,7 +89,7 @@ static int set_forward_delay(int sk)
> struct ifreq ifr;
>
> memset(&ifr, 0, sizeof(ifr));
> - strncpy(ifr.ifr_name, bridge, IFNAMSIZ);
> + strncpy(ifr.ifr_name, bridge, IFNAMSIZ - 1);
> ifr.ifr_data = (char *) args;
>
> if (ioctl(sk, SIOCDEVPRIVATE, &ifr) < 0) {

Applied, thanks.

--
BR
Szymon Janc