projects
/
sdk
/
emulator
/
emulator-kernel.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
34e5786
)
Fixed out of the bounds memcpy in maru evdi
45/220945/1
author
Andrey Kazmin
<a.kazmin@partner.samsung.com>
Mon, 16 Dec 2019 07:25:53 +0000
(10:25 +0300)
committer
Dongkyun Son
<dongkyun.s@samsung.com>
Thu, 26 Dec 2019 03:51:35 +0000
(12:51 +0900)
Change-Id: I87565fde5a245f813dde58164220e52647647a89
Signed-off-by: Andrey Kazmin <a.kazmin@partner.samsung.com>
drivers/maru/maru_virtio_evdi.c
patch
|
blob
|
history
diff --git
a/drivers/maru/maru_virtio_evdi.c
b/drivers/maru/maru_virtio_evdi.c
index 74e8d3613ed58c31bd4ef5f13ed1a6ad62c5707a..d30ea811e6aa2c49e717a9210c75795b1f90f96a 100644
(file)
--- a/
drivers/maru/maru_virtio_evdi.c
+++ b/
drivers/maru/maru_virtio_evdi.c
@@
-210,7
+210,7
@@
static void send_guest_connected_msg(bool connected)
memset(_msg, 0, sizeof(vevdi->send_msginfo));
- memcpy(_msg->buf, GUEST_CONNECTION_CATEGORY,
7
);
+ memcpy(_msg->buf, GUEST_CONNECTION_CATEGORY,
sizeof(GUEST_CONNECTION_CATEGORY)
);
memcpy(_msg->buf + ID_SIZE + 3, &connect, 1);
_msg->route = route_control_server;
_msg->use = ID_SIZE + HEADER_SIZE;