mirrors/alsa-tools
1
0
Fork 0
mirror of https://github.com/alsa-project/alsa-tools.git synced 2025-11-02 09:01:48 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

envy24control: fix memory access errors in profiles

Browse source 
Fix two memory errors in the profiles parser: an invalid read and a
"source and destination overlap in strncpy" warning.

When the profiles page is initialized it fetches the profile names from
the profiles file. When a profile wasn't defined in the file, the parser
made invalid reads outside the buffer.

Signed-off-by: Andreas Persson <andreasp56@outlook.com>
This commit is contained in:
Andreas Persson 2025-03-29 13:20:15 +01:00
parent 5eaadd15bd
commit 733aa322ec
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
envy24control/profiles.c
View file

@ -94,7 +94,9 @@ int get_file_size(const char * const filename)
{ {
struct stat file_status; struct stat file_status;
strncpy(filename_without_tilde, filename, MAX_FILE_NAME_LENGTH); if (filename_without_tilde != filename) {
strncpy(filename_without_tilde, filename, MAX_FILE_NAME_LENGTH);
}
filename_without_tilde[MAX_FILE_NAME_LENGTH - 1] = '\0'; filename_without_tilde[MAX_FILE_NAME_LENGTH - 1] = '\0';
subst_tilde_in_filename(filename_without_tilde); subst_tilde_in_filename(filename_without_tilde);
if (stat(filename_without_tilde, &file_status) < 0) { if (stat(filename_without_tilde, &file_status) < 0) {
@ -470,7 +472,8 @@ int get_pos_name_header_from_card(const char * const buffer, const int profile_n
char place_holder; char place_holder;
int pos_card_begin, pos_card_end, pos_name_header; int pos_card_begin, pos_card_end, pos_name_header;
pos_card_begin = get_card_begin(buffer, profile_number, card_number); if ((pos_card_begin = get_card_begin(buffer, profile_number, card_number)) < 0)
return pos_card_begin;
pos_card_end = get_card_end(buffer, profile_number, card_number); pos_card_end = get_card_end(buffer, profile_number, card_number);
place_holder = PLACE_HOLDER_STR; place_holder = PLACE_HOLDER_STR;
strncpy(header, PROFILE_NAME_TEMPL, MAX_SEARCH_FIELD_LENGTH); strncpy(header, PROFILE_NAME_TEMPL, MAX_SEARCH_FIELD_LENGTH);