From: Sooyoung Ha <yoosah.ha@samsung.com>
Date: Thu, 10 Jan 2013 08:52:50 +0000 (+0900)
Subject: [Title] fix the untrusted value as argument.
X-Git-Tag: submit/tizen/20150529.014734~8^2~29
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=bc148bfb89fd13ed743e2ba80b8511b7835e291b;p=platform%2Fadaptation%2Femulator%2Fvmodem-daemon-emulator.git

[Title] fix the untrusted value as argument.
[Desc.] modify libvmodem/libvgsm_init.c, lxtutil.c
---

diff --git a/libvmodem/libvgsm_init.c b/libvmodem/libvgsm_init.c
index ddd3c2e..29b7891 100644
--- a/libvmodem/libvgsm_init.c
+++ b/libvmodem/libvgsm_init.c
@@ -383,7 +383,7 @@ static int lxt_callback(LXT_HANDLE* handle)
 	}
 
 	// check length
-	if (packet.length > 0)
+	if (packet.length != 0)
 	{
 		// allocated memory
 		packet.data = malloc(packet.length);
diff --git a/libvmodem/lxtutil.c b/libvmodem/lxtutil.c
index d386b0d..7991f62 100644
--- a/libvmodem/lxtutil.c
+++ b/libvmodem/lxtutil.c
@@ -51,6 +51,7 @@
 int lxt_util_readRawBytes(int fd, void *data, int size)
 {
     int rc;
+    LXT_MESSAGE tmp_buf;
 
     // check
     if ( (data == 0) || (fd < 0) )
@@ -62,7 +63,11 @@ int lxt_util_readRawBytes(int fd, void *data, int size)
         return -1;
     }
 
-    rc = read(fd, data, size);
+    rc = read(fd, &tmp_buf, size);
+
+    ((LXT_MESSAGE*)data)->length = (unsigned short)tmp_buf.length;
+    ((LXT_MESSAGE*)data)->group = (unsigned char)tmp_buf.group;
+    ((LXT_MESSAGE*)data)->action = (unsigned char)tmp_buf.action;
 
     if (rc <= 0)
     {