Change string size of strncat for security issue 85/126385/1 accepted/tizen/unified/20170426.061812 submit/tizen/20170425.111935 tizen_4.0.m1_release
authorJunsuChoi <jsuya.choi@samsung.com>
Fri, 21 Apr 2017 07:04:17 +0000 (16:04 +0900)
committerJunsuChoi <jsuya.choi@samsung.com>
Fri, 21 Apr 2017 07:04:52 +0000 (16:04 +0900)
Change-Id: Idb55cba1a5f156d2baf95e371a5c70071893e8a8

src/wearable/efl_extension_rotary_selector.c

index e8e47792fea0806418a7e04cfec03b756b2ae965..0640248b49bfa2d784bca2e3b81cdf648de3c2ce 100644 (file)
@@ -3116,12 +3116,12 @@ _accessibility_item_name_set_cb(void *data, Evas_Object *obj)
    char buf[255] = "";
    if(item->text1)
      {
-        strncat(buf, item->text1, strlen(item->text1));
+        strncat(buf, item->text1, sizeof(buf) - strlen(buf) - 1);
      }
    if(item->text2)
      {
-        strncat(buf, " ", strlen(" "));
-        strncat(buf, item->text2, strlen(item->text2));
+        strncat(buf, " ", sizeof(buf) - strlen(buf) - 1);
+        strncat(buf, item->text2, sizeof(buf) - strlen(buf) - 1);
      }
    return strdup(buf);
 }