From 5bc3e13cc427058f3ddbf6dbe3af59921c00dbae Mon Sep 17 00:00:00 2001 From: Jongkyu Koo Date: Tue, 26 Apr 2016 16:07:50 +0900 Subject: [PATCH] fix buffer overflow Change-Id: Ib20b38c6dcc41f742d982ea541b12cd9d88cd456 Signed-off-by: Jongkyu Koo --- server/db/ctsvc_db_plugin_group_helper.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/server/db/ctsvc_db_plugin_group_helper.c b/server/db/ctsvc_db_plugin_group_helper.c index b1d0a18..7f4d6cd 100644 --- a/server/db/ctsvc_db_plugin_group_helper.c +++ b/server/db/ctsvc_db_plugin_group_helper.c @@ -87,8 +87,14 @@ int ctsvc_db_group_name_sort_callback(void *context, int str1_len, const void *s char str_src2[CTSVC_STR_SHORT_LEN] = {0}; int prim_sort = ctsvc_get_primary_sort(); + if (CTSVC_STR_SHORT_LEN <= str1_len) + str1_len = CTSVC_STR_SHORT_LEN -1; + if (CTSVC_STR_SHORT_LEN <= str2_len) + str2_len = CTSVC_STR_SHORT_LEN -1; + strncpy(str_src1, str1, str1_len); strncpy(str_src2, str2, str2_len); + str1_sort_type = ctsvc_get_name_sort_type(str_src1); str2_sort_type = ctsvc_get_name_sort_type(str_src2); -- 2.7.4