From: Andrey Kazmin Date: Mon, 16 Dec 2019 07:25:53 +0000 (+0300) Subject: Fixed out of the bounds memcpy in maru evdi X-Git-Tag: submit/tizen/20200108.133605~2 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=e6cb3a3c5d571bb47d4a694e3e15dc49a7c71baa;p=sdk%2Femulator%2Femulator-kernel.git Fixed out of the bounds memcpy in maru evdi Change-Id: I87565fde5a245f813dde58164220e52647647a89 Signed-off-by: Andrey Kazmin --- diff --git a/drivers/maru/maru_virtio_evdi.c b/drivers/maru/maru_virtio_evdi.c index 74e8d3613ed5..d30ea811e6aa 100644 --- a/drivers/maru/maru_virtio_evdi.c +++ b/drivers/maru/maru_virtio_evdi.c @@ -210,7 +210,7 @@ static void send_guest_connected_msg(bool connected) memset(_msg, 0, sizeof(vevdi->send_msginfo)); - memcpy(_msg->buf, GUEST_CONNECTION_CATEGORY, 7); + memcpy(_msg->buf, GUEST_CONNECTION_CATEGORY, sizeof(GUEST_CONNECTION_CATEGORY)); memcpy(_msg->buf + ID_SIZE + 3, &connect, 1); _msg->route = route_control_server; _msg->use = ID_SIZE + HEADER_SIZE;