Use strtoul instead of strtol to prevent overflow.

Change-Id: Iec6735db888f9c9ce4f5ef650381608f08953ca7
Signed-off-by: Deokhyun Kim <dukan.kim@samsung.com>

diff --git a/src/bluetooth-adapter.c b/src/bluetooth-adapter.c
index 91289f9b6e41dba14386ba9c76241c06697381e4..0fd3b5b7d0b7567fb2da2807ffb61b4bd48befc5 100644 (file)
--- a/src/bluetooth-adapter.c
+++ b/src/bluetooth-adapter.c
@@ -1825,10 +1825,9 @@ static int __bt_convert_string_to_uuid(const char *string,
 
        if (strlen(string) == 4)  { /* 16 bit uuid */
                unsigned short val;
-               char *stop;
-               data = g_malloc0(sizeof(char) *2);
+               data = g_malloc0(sizeof(char) * 2);
 
-               val = strtol(string, &stop, 16);
+               val = (unsigned short)strtoul(string, NULL, 16);
                val = htons(val);
                memcpy(data, &val, 2);
                *uuid = data;
@@ -1843,12 +1842,11 @@ static int __bt_convert_string_to_uuid(const char *string,
                char str_ptr[37] = { 0 };
                char *ptr[7];
                char *next_ptr;
-               char *stop;
                int idx = 0;
 
                unsigned int val0, val4;
                unsigned short val1, val2, val3, val5;
-               data = g_malloc0(sizeof(char) *16);
+               data = g_malloc0(sizeof(char) * 16);
 
                /* UUID format : %08x-%04hx-%04hx-%04hx-%08x%04hx */
                strncpy(str_ptr, string, 36);
@@ -1866,12 +1864,12 @@ static int __bt_convert_string_to_uuid(const char *string,
                strncpy(ptr[5], ptr[4], 8);
                strncpy(ptr[6], ptr[4] + 8, 4);
 
-               val0 = strtol(ptr[0], &stop, 16);
-               val1 = strtol(ptr[1], &stop, 16);
-               val2 = strtol(ptr[2], &stop, 16);
-               val3 = strtol(ptr[3], &stop, 16);
-               val4 = strtol(ptr[5], &stop, 16);
-               val5 = strtol(ptr[6], &stop, 16);
+               val0 = (unsigned int)strtoul(ptr[0], NULL, 16);
+               val1 = (unsigned short)strtoul(ptr[1], NULL, 16);
+               val2 = (unsigned short)strtoul(ptr[2], NULL, 16);
+               val3 = (unsigned short)strtoul(ptr[3], NULL, 16);
+               val4 = (unsigned int)strtoul(ptr[5], NULL, 16);
+               val5 = (unsigned short)strtoul(ptr[6], NULL, 16);
 
                val0 = htonl(val0);
                val1 = htons(val1);