From 45742988d3e455d0b12a5d2ab04aa5f2d32a2820 Mon Sep 17 00:00:00 2001 From: Yury Usishchev Date: Mon, 25 Jul 2016 10:41:31 +0300 Subject: [PATCH] Fix global-buffer-overflow in sqlcipher.c null-terminated string(pVfs->zName) has no assurance that the length is longer than 10 so buffer-overflow can occured Change-Id: I9dad1321ba2e8be4260feb33eb3874bb2c6cbb09 Signed-off-by: Yury Usishchev --- src/manager/sqlcipher/sqlcipher.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/manager/sqlcipher/sqlcipher.c b/src/manager/sqlcipher/sqlcipher.c index 3d7f667..2008e5a 100644 --- a/src/manager/sqlcipher/sqlcipher.c +++ b/src/manager/sqlcipher/sqlcipher.c @@ -31169,7 +31169,7 @@ static int fillInUnixFile( OSTRACE(("OPEN %-3d %s\n", h, zFilename)); pNew->h = h; pNew->zPath = zFilename; - if( memcmp(pVfs->zName,"unix-excl",10)==0 ){ + if( strcmp(pVfs->zName,"unix-excl")==0 ){ pNew->ctrlFlags = UNIXFILE_EXCL; }else{ pNew->ctrlFlags = 0; -- 2.7.4