Fix Svace issue - BUFFER_OVERFLOW

[Version] 0.2.86
[Profile] Common
[Issue Type] Bug fix
[Dependency module] N/A

Change-Id: Icc6e33ec981a0dcd0e599612e7a48abafde11ee7
Signed-off-by: Jeongmo Yang <jm80.yang@samsung.com>

diff --git a/include/camera_private.h b/include/camera_private.h
index c70318f..e197cb1 100644 (file)
--- a/include/camera_private.h
+++ b/include/camera_private.h
@@ -113,7 +113,7 @@ typedef struct _camera_cb_info_s {
        /* message receive thread */
        GThread *msg_recv_thread;
        gint msg_recv_running;
-       gchar recv_msg[MUSE_MSG_MAX_LENGTH];
+       gchar recv_msg[MUSE_MSG_MAX_LENGTH + 1];
        GCond api_cond[MUSE_CAMERA_API_MAX];
        GMutex api_mutex[MUSE_CAMERA_API_MAX];
        gint api_activating[MUSE_CAMERA_API_MAX];
@@ -163,7 +163,7 @@ typedef struct _camera_cb_info_s {
 } camera_cb_info_s;
 
 typedef struct _camera_message_s {
-       gchar recv_msg[MUSE_CAMERA_MSG_MAX_LENGTH];
+       gchar recv_msg[MUSE_CAMERA_MSG_MAX_LENGTH + 1];
        muse_camera_api_e api;
        muse_camera_event_e event;
        muse_camera_event_class_e event_class;
@@ -171,7 +171,7 @@ typedef struct _camera_message_s {
 
 typedef struct _camera_idle_event_s {
        camera_cb_info_s *cb_info;
-       gchar recv_msg[MUSE_CAMERA_MSG_MAX_LENGTH];
+       gchar recv_msg[MUSE_CAMERA_MSG_MAX_LENGTH + 1];
        muse_camera_event_e event;
        GMutex event_mutex;
 } camera_idle_event_s;

diff --git a/packaging/capi-media-camera.spec b/packaging/capi-media-camera.spec
index d4c8f1b..1c17134 100644 (file)
--- a/packaging/capi-media-camera.spec
+++ b/packaging/capi-media-camera.spec
@@ -1,6 +1,6 @@
 Name:       capi-media-camera
 Summary:    A Camera API
-Version:    0.2.85
+Version:    0.2.86
 Release:    0
 Group:      Multimedia/API
 License:    Apache-2.0