ExternalVendorCode/genode
1
0
Fork 0
mirror of https://github.com/genodelabs/genode.git synced 2024-12-19 13:47:56 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Xml_node: fix bug in Xml_node::decoded_content

Browse Source 
Previously, the dst_len value was not decreased after each character that was
written to the dst buffer. This way, if the content length was greater than
dst_len, decoded_content wrote to memory out of bounds.

Issue #2644
This commit is contained in:
Martin Stein 2018-01-16 14:30:30 +01:00 committed by Norman Feske
parent 84e476facb
commit 26f65f4996
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
repos/base/include/util/xml_node.h
View File

@ -683,7 +683,7 @@ class Genode::Xml_node
char const *src = content_base(); char const *src = content_base();
size_t src_len = content_size(); size_t src_len = content_size();
for (; dst_len && src_len; result_len++) { for (; dst_len && src_len; dst_len--, result_len++) {
Decoded_character const decoded_character(src, src_len); Decoded_character const decoded_character(src, src_len);