Check for null-termination of strings

[platform/core/base/bundle.git] / src / keyval.c

diff --git a/src/keyval.c b/src/keyval.c
index ee069c2..d49be0e 100755 (executable)
--- a/src/keyval.c
+++ b/src/keyval.c
@@ -19,6 +19,7 @@
  * Implementation of keyval object
  */
 
+#define _GNU_SOURCE
 #include <stdlib.h>
 
 #include "keyval_type.h"
@@ -38,6 +39,7 @@ keyval_t *keyval_new(keyval_t *kv, const char *key,
                const int type, const void *val, const size_t size)
 {
        int must_free_obj = kv ? 0 : 1;
+       char *str;
 
        if (!kv) {
                kv = calloc(1, sizeof(keyval_t));
@@ -69,8 +71,14 @@ keyval_t *keyval_new(keyval_t *kv, const char *key,
                        keyval_free(kv, must_free_obj);
                        return NULL;
                }
-               if (val)
+               if (val) {
                        memcpy(kv->val, val, size);
+                       if (type == BUNDLE_TYPE_STR) {
+                               str = (char *)kv->val;
+                               if (str[size - 1] != '\0')
+                                       str[size - 1] = '\0';
+                       }
+               }
        }
 
        kv->method = &method;
@@ -223,6 +231,7 @@ size_t keyval_decode(unsigned char *byte, keyval_t **kv, size_t byte_size)
        size_t size;
        void *val;
        unsigned char *p = byte;
+       size_t encoded_size;
 
        byte_len = *((size_t *)p);
 
@@ -250,6 +259,9 @@ size_t keyval_decode(unsigned char *byte, keyval_t **kv, size_t byte_size)
        if (byte_size < keysize)
                return 0;
 
+       if (!key || (strnlen(key, keysize) + 1) != keysize)
+               return 0;
+
        byte_size -= keysize;
        p += keysize;
        size = *((size_t *)p);
@@ -260,6 +272,12 @@ size_t keyval_decode(unsigned char *byte, keyval_t **kv, size_t byte_size)
        byte_size -= sz_size;
        p += sz_size;
        val = (void *)p;
+
+       encoded_size = sz_byte_len + sz_type + sz_keysize + keysize +
+               sz_size + size;
+       if (encoded_size != byte_len)
+               return 0;
+
        p += size;
 
        if (kv)
@@ -274,7 +292,7 @@ int keyval_get_type_from_encoded_byte(unsigned char *byte)
        unsigned char *p = byte;
        int type;
 
-        p += sz_byte_len;
+       p += sz_byte_len;
        type = *((int *)p);
 
        return type;