edje: fix buffer overrun.
authorCedric BAIL <cedric.bail@samsung.com>
Fri, 22 Mar 2013 11:10:39 +0000 (20:10 +0900)
committerCedric BAIL <cedric.bail@samsung.com>
Fri, 22 Mar 2013 11:15:05 +0000 (20:15 +0900)
src/lib/edje/edje_load.c

index 9851152..0aa0dda 100644 (file)
@@ -1851,7 +1851,7 @@ _cb_signal_repeat(void *data, Evas_Object *obj, const char *sig, const char *sou
           length_parent += eina_convert_itoa(i, new_src + length_parent);
         else
           {
-             memcpy(new_src + length_parent, name, length_index);
+             memcpy(new_src + length_parent, name, length_index - 2);
              length_parent += length_index - 2;
           }
         new_src[length_parent++] = EDJE_PART_PATH_SEPARATOR_INDEXR;