bus-message: do not crash on message with a string of zero length
authorZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Mon, 9 Jul 2018 11:21:44 +0000 (13:21 +0200)
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Tue, 2 Oct 2018 09:53:20 +0000 (11:53 +0200)
commit81b6e63029eefcb0ec03a3a7c248490e38106073
treefe33a1a4104fd926a09757e4aeb10e60fb741d69
parent69bd42ca072dfb2f7603b1f82053063293ab54b5
bus-message: do not crash on message with a string of zero length

We'd calculate the "real" length of the string as 'item_size - 1', which does
not work out well when item_size == 0.
src/libsystemd/sd-bus/bus-message.c
test/fuzz/fuzz-bus-message/crash-29ed3c202e0ffade3cad42c8bbeb6cc68a21eb8e [new file with mode: 0644]